Where processing rests on consent it must be given voluntarily and explicitly on full information, and where a law or administrative regulation requires separate or written consent that applies; a change of purpose, means or category of information requires new consent; the individual may withdraw consent and the processor must provide convenient means to do so, withdrawal not affecting processing already done; and a processor may not refuse products or services because an individual withholds or withdraws consent, unless the processing is necessary to provide them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.