The representative must state whether its general policy on redundant data is to delete, to de-identify or to decide at the time, and if it may de-identify, that it would apply the de-identification process and could then use or disclose (including sell) the data without further consent, what de-identification means, and examples of use where applicable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.