Personal data is collected for legitimate, specific purposes transparent to the data subject, is correct, valid and secured, is processed legitimately and in keeping with the collection purposes, and is not retained longer than the purpose requires, under the policies, procedures and standard criteria the Regulations set.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.