A data subject proving identity may object on legitimate grounds to processing of his or her data, and may object free of charge to use of the data for prospecting, in particular commercial, by the current controller or a later one. The first right does not apply where processing meets a legal obligation or the act authorising the processing expressly excludes it. Processing despite a justified objection, or for prospecting after objection, is an offence (Article 59).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.