On a subject's request the owner or operator must take the necessary measures, such as correcting data or prohibiting its processing, and inform any third party to which the data was previously transferred of those measures within 3 working days.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.