There is a person or role to whom privacy issues can be reported, even ad hoc, with a senior role accountable for coordinating their resolution.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.