Retention. Section 23 requires organisations to cease retention of personal data when the purpose is no longer served and retention is no longer necessary for legal or business purposes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.