Controllers and processors ensure personal information is processed in line with the right to privacy, lawfully, fairly and transparently, for explicit, specified and legitimate purposes, adequately and no more than necessary, with a valid explanation when family or private affairs are asked about, accurately with prompt correction or erasure, and kept identifiable no longer than necessary. Contravention is an offence (s.33(2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.