The safeguards requirement is not met if the processing is likely to cause substantial damage or substantial distress to a data subject, or if it is for measures or decisions about a particular data subject (except approved medical research approved by a recognised research ethics committee or equivalent body), and it is met only if the safeguards include technical and organisational measures ensuring data minimisation, such as pseudonymisation. Regulations under Article 84D may say more.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.