Except in the Article 8.3 cases, transfer of personal data by third parties to the owner or operator, and by them to any third party, requires the subject's written consent (including through the e-government system). Without consent, transfer is allowed only for open data, for confidential data provided by state or local self-government bodies in performing their duties in compliance with information system requirements, or where needed to protect the subject's life and health and consent cannot be obtained promptly.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.