Operators must notify the State Personalisation Centre and affected data subjects in cases of incidents involving unauthorised access, disclosure, alteration or destruction of personal data, within timeframes established by regulations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.