Every public or private database must be registered with the URCDP's Register of Personal Databases under its criteria, with the registration necessarily containing the identification of the database and its responsible party, the nature of the data, the procedures for obtaining and processing them, security measures and technical description, protection of data and exercise of rights, the destination of the data and the persons to whom they may be transmitted, the retention period, how persons may access their data and the procedures for rectification or updating, and for commercial databases the counts of five-year expiries and cancellations under article 22; no user may hold personal data of a nature other than declared in the register, and non-compliance attracts administrative sanctions. Decreto 414/009 (as amended by Decreto 308/014) sets the content, a 90-day deadline from the start of activity, display of the registration resolution's number and date in a place visible to users, and updating of the register on changes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.