Where processing rests on consent, the controller must be able to prove that consent was given; a consent request in a written declaration covering other matters must be clearly distinguishable, intelligible, easily accessible and in clear and plain language, and any part infringing the Law is not binding. The data subject may withdraw consent at any time, must be told so before consenting, and withdrawal must be as easy as giving consent. Whether consent is freely given takes particular account of whether a contract or service is made conditional on consent to processing not necessary for it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.