When a representative seeks a de-identification consent it must explain the CDR data de-identification process, any disclosure (including sale) of de-identified data with recipient classes and reasons, any general research use with a link to the description in the principal's CDR policy and any additional benefit, and that the consumer cannot elect deletion of de-identified data once redundant.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.