The controller notifies the Commissioner, in the form and procedure the Commissioner sets, of processing that poses a particular risk to data subjects' rights and freedoms (types and categories set by the Commissioner) within thirty working days of starting it, and of any change in notified information within ten working days; notified information is published on the Commissioner's website.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.