The data subject has the right to easy access to information about the processing of their data, provided clearly, adequately and ostensibly, covering at least: the specific purpose; the form and duration of processing (respecting commercial and industrial secrets); the controller's identity and contact information; information on shared use of data by the controller and its purpose; the responsibilities of the agents that will process the data; and the data subject's rights, with express mention of the Art. 18 rights. Where consent is required, it is void if the information was misleading or abusive or not presented beforehand transparently, clearly and unambiguously, and any incompatible change of purpose must be communicated in advance so the data subject can revoke. Where processing is a condition for supplying a product or service or exercising a right, the data subject must be told so prominently, and told how to exercise their rights.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.