Where consent is the legal basis for processing personal data, the device offers a valid way of obtaining it, usually an opt-in that is explicit, clearly visible, free of charge and tied to a stated purpose. Status in Table B.1: M F (y) (mandatory, a shall provision; applies only where personal data is processed on the basis of consent).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.