The processor must process for the specified purpose and period; if processing will exceed that period it must tell the controller so that the controller can authorise an extension or give instructions. It must erase the data when the processing period ends or when it hands the data back to the controller.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.