Personal data that may adversely affect the data subject may not be kept for more than five years from the date the recorded events occurred, unless a special rule sets another term or the parties agreed a shorter one; where retention beyond that period is necessary, the data must be dissociated from the data subject.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.