Further processing must be in accordance or compatible with the purpose of collection, assessed on the relationship between the purposes, the nature of the information, the consequences for the data subject, the manner of collection and any contractual rights and obligations; further processing is not incompatible where the data subject consented, the information is in a public record or deliberately made public, it is necessary for the maintenance of the law, a legal obligation or revenue legislation, court proceedings or national security, or to prevent or mitigate a serious and imminent threat to public health or safety or a person's life or health, it is for historical, statistical or research purposes not published in identifiable form, or it falls under a section 37 exemption.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.