Personal data may be communicated only for purposes directly related to the legitimate interest of the sender and the recipient and with the data subject's prior consent, informed of the purpose of the communication and the identity of the recipient or the elements permitting identification; the consent is revocable; consent is not required where a law of general interest so provides, in the article 9 cases, for health data where communication is necessary for health, emergency or epidemiological reasons preserving identity by dissociation where pertinent, or where the information has been dissociated; the recipient is subject to the same obligations as the sender, and the sender is jointly and severally liable for their observance before the URCDP and the data subject. Decreto 414/009 excludes from communication the access of a processor necessary to provide a service to the responsible party.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.