The owner may act as operator itself or entrust collection and processing to an operator under a contract that guarantees protection of the data; the operator's duties are set by the Law and the contract, and consist of ensuring lawful and secure processing and performing the contract's conditions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.