Subjects have the right to learn whether an information system holds data about them and who its owner or operator is; to ask for the legal justification of collection, processing and transfer to third parties and its legal consequences; to see the content of their data; to know the purposes, period and methods of processing and who may access it, including systems it is exchanged with; to learn the sources of the data and have their lawfulness proved; to demand protection; and to know whether the systems holding their data have a conformity certificate and passed state expertise.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.