Article 20 requires recognised data altruism organisations to record: (a) all data users using their data; (b) the dates / durations of use; (c) the purpose; (d) any fees paid by data users; (e) the data subjects / data holders' interests safeguarded. Article 21 imposes safeguarding requirements: clear information to data subjects/data holders, mechanisms for consent / permission withdrawal, appropriate technical + organisational measures to protect rights, no use of data for other purposes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.