Whenever the rules require CDR data to be deleted, the person holding it must delete, to the extent reasonably practicable, the data and every copy, make a record evidencing the deletion, and, where someone else holds the data on its behalf and will perform the steps, direct that person to notify it when they have been performed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.