To prepare and carry out state award and honour procedures, the bodies responsible, and any other public or private body, may process the data needed, including special categories, also without the data subject's knowledge; other uses need consent. GDPR Arts. 13 to 16, 19 and 21 do not apply to such processing, and special categories require appropriate specific measures under s 22(2).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.