An identity document may be processed only when clearly justified having regard to the purpose and either the importance of secure identification or another valid reason provided by law; the national identity number or any other identifier of general application may be used only under appropriate safeguards for the data subject's rights and freedoms under the GDPR.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.