Subject to Article 6, before processing begins the controller must inform the data subject in writing or electronically of: the data to be processed and the start date; the purpose; the processing period, which cannot be extended without the data subject's consent; any processor that will take part in processing with the controller; the controls for the security, integrity and protection of the data; and information on profiling.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.