The controller or its representative must inform the people from whom personal data are collected of: the identity of the controller or its representative; the purposes of processing; whether answering the questions is mandatory or optional; the possible consequences of not answering; the persons to whom the data will be sent; and the right of access and correction and the means provided for it. Forms used to collect data must set out this information expressly and clearly.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.