Article 6 sets the obligations of third parties receiving data at user request: they may only use the data for the purposes and under the conditions agreed with the user; they may not use the data to develop a connected product that competes with the connected product from which the data originate; they may not use the data to derive insights about the economic situation, assets and production methods of the data holder; they may not share the data with other third parties without the user's consent; they shall implement appropriate technical and organisational measures to protect the data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.