An organisation must make a reasonable effort to ensure that personal data collected by or on its behalf is accurate and complete if the data is likely to be used to make a decision that affects the individual or to be disclosed to another organisation; the guidelines expect verification proportionate to the impact, especially for data from third-party sources and derived data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.