The Commissioner approves binding corporate rules that are legally binding on every member of the group, including employees, confer enforceable rights on data subjects and specify at least the group structure, the transfers, their binding nature, the application of the principles, data subject rights including the automated decision-making protections, the right to complain to the controller and the Commissioner and to go to court, UK liability for members abroad, how data subjects are informed, the monitoring role, complaint procedures, audit and verification mechanisms, change reporting, cooperation with the Commissioner, reporting of conflicting foreign legal requirements, and training.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.