The data subject may obtain restriction while accuracy is verified, where processing is unlawful and erasure is opposed, where the controller no longer needs the data but the data subject needs it for legal claims, or pending verification of an objection. Restricted data may, apart from storage, be processed only with consent, for legal claims, to protect another person's rights or for important public interest, and the data subject must be told before a restriction is lifted.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.