Personal data must be processed lawfully and fairly in line with the Law's provisions and principles, and the controller must be able to demonstrate the lawfulness of every processing it carries out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.