Where consent is the basis it must be given voluntarily and explicitly by a fully informed individual; separate consent or written consent is required where laws/regulations so provide.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.