Personal data must be collected and processed for a specific, legitimate and lawful purpose to which the data subject consented. Further processing is allowed only for archiving, scientific research, historical research or statistical purposes in the public interest, and whoever carries out such further processing must not transfer the personal data to any person.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.