When seeking a de-identification consent the accredited person must explain what the CDR data de-identification process is; if it would disclose (including by sale) the de-identified data, that fact, the classes of recipients and why; if it would use it for general research, that fact with a link to the CDR policy's description of the research and any additional benefit to the consumer; and that the consumer will not be able to elect deletion of the de-identified data once it becomes redundant.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.