Consent given for processing personal data can be withdrawn at any time: where consent is the basis, the device provides a way to withdraw that consent whenever the consumer chooses. Status in Table B.1: M F (y) (mandatory, a shall provision; applies only where personal data is processed on the basis of consent).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.