The operator maintains a written retention policy and retains child PI only as long as is reasonably necessary to fulfil the purpose for which it was collected, and deletes the PI by reasonable measures designed to protect against unauthorised access/use in connection with its deletion.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.