Train all personnel who handle personal information on their obligations under the Act, with role specific modules for high risk functions such as customer service, HR, marketing and engineering, and refresh the training at least annually.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.