Special categories may be processed without consent for scientific or historical research or statistics where necessary and the controller's interest overrides; the controller takes suitable and specific safeguards (access restrictions, pseudonymisation, encryption, a DPO), anonymises special-category data as soon as the research purpose allows unless against the data subject's interest, and until then stores the identifying characteristics separately, combining them only as the research requires. Access, rectification, restriction and objection rights may be limited where they would seriously impair the research.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.