Controllers must guarantee full and effective exercise of habeas data at all times; keep the information under the security conditions needed to prevent tampering, loss, consultation and unauthorised use or access; update, rectify or delete data promptly; handle data subjects' queries and complaints; adopt an internal manual of policies and procedures to ensure compliance, in particular for handling queries and complaints; and allow access only to persons entitled to it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.