Limit the personally identifiable information in visitor access records to the minimum needed for the purpose of collection, with access to the records restricted to authorised agency personnel.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.