State organs handling PI to fulfil statutory duties must do so within the scope and limits necessary, and must inform individuals and obtain consent unless an exemption applies or it would impede the performance of those duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.