Sets the scope of the Act and defines the data subject and the bodies to which the Act applies, including how it interacts with directly applicable GDPR.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.