The organization must give the customer what it needs to meet its duties to individuals. It should recognise that those duties may come from law, regulation or contract, and may cover things the customer depends on the organization's services to carry out, such as promptly correcting or erasing data. Any information or technical support from the organization that the customer depends on to meet its duties, those must be set out in a contract.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.