A record of consent is kept: where personal data is processed on the basis of consent, the device provides a way to store information about that consent, such as when it was given or withdrawn and which purposes it covers. Status in Table B.1: M F (y) (mandatory, a shall provision; applies only where personal data is processed on the basis of consent).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.