Personal Data Storage and Destruction Policy must define retention periods for each data category based on legal requirements (e.g., Tax Procedure Law 5 years, Labour Law 10 years, Commercial Code 10 years) and justify storage beyond legal minimums.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.