Before processing likely to result in a high risk to individuals, considering its nature, scope, context and purposes, the controller must carry out a DPIA containing a general description of the processing, an assessment of the risks, the measures to address them, and the safeguards, security measures and mechanisms to protect data and demonstrate compliance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.