A consumer has the right to delete personal data concerning them. For personal data lawfully obtained from a source other than the consumer, a controller complies with a deletion request either by deleting the data or by keeping a record of the request and the minimum data needed to ensure the consumer's data stays deleted, using that retained information for no other purpose (166.10(b)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.