Rewrites Article 5(1)(b) around the purposes for which the controller collected the data, states that compatibility alone is no lawful basis (Article 5(3)), omits Article 6(4) and inserts Article 8A with Annex 2: the compatibility factors, the cases treated as compatible (consent to a specified new purpose, research, archiving and statistics under Article 84B, compliance checks, Annex 2 conditions, and objectives in Article 23(1)(c) to (j) authorised by law) and the stricter rule where the data was collected on consent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.