A controller must provide a copy or a representative summary (at its discretion, considering the data and purposes) of personal data the consumer previously provided, in a portable and, where technically practicable, readily usable format that can be transmitted to another controller where processing is automated; it need not do so more than once in twelve months for the same consumer.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.