Where processing is carried out by research or statistics institutions or services and the necessary arrangements ensure the data can be used only for statistical or scientific purposes, the controller may set aside GDPR arts 15, 16 and 18.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.