An organisation must cease to retain its documents containing personal data, or remove the means by which the data can be associated with particular individuals (anonymisation), as soon as it is reasonable to assume that the purpose for which the data was collected is no longer served by retention and retention is no longer necessary for legal or business purposes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.