Special categories of personal data (Article 9(1) GDPR) may be processed for scientific or historical research or statistical purposes under Article 9(2)(j) GDPR provided the controller meets the requirements of Article 65. Pending: bill 8476 (implementing the AI Act, before the Chamber of Deputies) would extend the article to processing under Article 9(2)(g) GDPR (substantial public interest) as well; not in force on 25 September 2026.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.