An individual is deemed to consent to collection, use or disclosure for a purpose where they voluntarily provide the personal data for that purpose and it is reasonable that they would; consent to disclosure to another organisation for a purpose is deemed consent to that organisation's collection, use and disclosure for it; and, since 2020, an individual who provides personal data with a view to entering into, or under, a contract with an organisation is deemed to consent to disclosure to and collection and use by other organisations where reasonably necessary for the conclusion or performance of that contract or of a contract entered at the individual's request or in their interest, subject to any contractual restriction on such disclosure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.