The data subject has the right to object to the processing of their personal data, including processing for direct marketing, automated processing or profiling, and must be notified and given an opportunity to withhold consent in case of changes or amendments to the information supplied or declared under the notice; when the data subject objects or withholds consent the controller must no longer process the personal data unless the data is needed under a subpoena, the collection and processing are for obvious purposes (performance of a contract or service with the data subject, or the employer-employee relationship), or the processing results from a legal obligation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.