Controllers take all measures necessary to comply with the Act's principles and obligations and have internal mechanisms to demonstrate compliance to data subjects and the Authority. Contravention is an offence (s.33(2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.