A data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, unless the decision is necessary for entering into or performing a contract with the controller, authorised by a written law with suitable safeguards, or authorised by the data subject's consent; in those cases the controller implements suitable measures to safeguard the data subject's rights, freedoms and interests, including the rights to obtain human intervention, to express their point of view and to contest the decision.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.