Legitimate interest is a basis only where processing is necessary for it and the data subject's fundamental rights and freedoms do not prevail, within a relevant and appropriate relationship and the data subject's reasonable expectations. The controller processes only strictly necessary data, ensures transparency by telling the data subject which legitimate interest it pursues, may be required by the supervisory authority to produce a prior analysis justifying the interest and the need, and must respect the data subject's right to object at any time on grounds of their particular situation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.