Collection and processing may take place only where: the subject consents or the data is in the open category; legislation defines the purposes and methods of processing; the data is anonymised for scientific or statistical research; or processing is needed to protect the subject's life and health.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.