The data subject may ask the controller to restrict use of the data (1) while the controller examines a section 36 request; (2) where data due for erasure under section 33(4) is instead restricted at the data subject's request; (3) where the data is no longer needed but the data subject needs it kept for legal claims; or (4) while the controller verifies grounds under section 32(1) or examines under section 32(3) to reject an objection. The data subject may complain to the expert committee if the controller fails to act; the Committee may set rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.