The owner of the data bank, the processor and everyone who intervenes at any stage of processing are bound to keep the personal data and their background confidential, an obligation that survives the end of their relationship with the owner; it may be lifted only by the data subject's prior, informed, express and unequivocal consent, a final judicial decision, or founded reasons of national defence, public security or public health, without prejudice to professional secrecy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.