The Authority issues guidelines and approves codes of conduct for controllers or categories of controllers, including codes from trade associations, checking compliance with the Act and optionally consulting affected data subjects; regulation 15 sets approval criteria (representation, purpose statement, scope, monitoring methods, compliance with other law) and a register of approved codes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.