The controller must implement appropriate technical and organizational measures, with appropriate safety and security measures, to demonstrate that processing complies with the law on personal data protection, reviewing and updating them where necessary; record and store the system log of personal data processing; notify breaches under article 23; select an appropriate processor with clear tasks and work only with processors that have appropriate measures; ensure the data subject's article 9 rights; answer to the data subject for damage caused by processing; and cooperate with the Ministry of Public Security and competent agencies in protecting personal data and provide information for investigations and the handling of breaches.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.