Controllers and processors admit the Commissioner's on-site and remote, planned and unscheduled inspections, provide any information and access to databases needed, and comply with the Commissioner's binding orders to prevent or remedy violations, including changing, deleting or destroying data, granting or refusing access or transfer, and suspending or stopping processing; the Commissioner may draw up administrative offence reports for court.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.