When the identified purposes stop requiring the original personal data, the organization must erase it or convert it into a form from which the individual cannot be identified, or identified again. It must have ways to erase data when no more processing is expected; de-identification is an acceptable substitute only while the result cannot reasonably be used to re-identify anyone.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.