The data subject may obtain erasure without undue delay where data were processed unlawfully, are no longer necessary, their retention period has expired, consent was withdrawn with no other basis, an objection succeeded, or erasure is needed to meet a legal obligation; erasure does not apply where it would harm freedom of information and expression or verified legitimate third-party interests, where public interest reasons prevail, or where mandatory retention periods apply.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.