The controller deletes personal data once the designated purpose is met, retaining it thereafter for any legitimate reason only in a form that does not identify the data subject; corrects any error immediately on notice or awareness; and keeps a record of personal data describing the categories held, the persons to whom data is disclosed or made available with the basis, duration, restrictions and scope, the mechanisms for deletion and modification, any cross-border transfer data, and the technical and organisational data security procedures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.