The controller must strive to keep the data in its databases accurate, complete, correct and up to date for their purposes. Data no longer needed for the purposes in the privacy notice must be suppressed, after blocking where applicable, once the retention period ends. Data on the breach of contractual obligations must be eliminated 72 months after the calendar date of the breach.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.