The data subject may object at any time to collection, use or disclosure (1) based on section 24(4) or (5), unless the controller proves compelling legitimate grounds or that it is for legal claims; (2) for direct marketing; or (3) for scientific, historical or statistical research, unless needed for a public interest task of the controller. Once an objection is made, the controller may no longer process the data and must immediately separate it clearly from other data at the time of the objection. Rejections on grounds (1)(a), (b) or (3) are recorded with reasons under section 39.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.