PII principals supply their PII to PII controllers and processors for processing and, unless applicable law says otherwise, consent to it and set their preferences for how it is to be processed; they exercise the rights of individual participation and access.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.