Data may be collected for processing only when adequate, relevant and not excessive for the specified, explicit and legitimate purposes for which they were obtained.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.