A data holder that discloses CDR data in response to a product data request must not impose any condition, restriction or limitation of any kind on the use of the disclosed data (civil penalty).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.