Controllers and processors must designate a data protection officer where processing is by a public authority or body (other than courts acting judicially), where core activities require regular and systematic monitoring of individuals on a large scale, or where core activities involve large-scale special category or criminal offence data. A group may share one easily accessible DPO and public bodies may share one. The DPO is designated for expert knowledge of data protection law and practice, may be staff or contracted, and the controller or processor must publish the DPO's contact details and communicate them to the Commissioner.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.