A database must be registered if its main purpose is collecting personal information to pass to others commercially or for consideration (including direct mail services) and it holds data on more than 10,000 persons, or if its controller is a public body (unless it holds only employee data); the controller may not process such a database until it is registered or the 60-day period passes without refusal, and may not process after a refusal or suspension (section 10(b2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.