Publishing personal data in official journals must follow GDPR Article 5, particularly purpose and minimisation: where the name suffices to identify the person and make the act effective, no other personal data is published; published data may never be altered, struck out or hidden; erasure is exceptional and done only by de-indexing from search engines, without removing the authentic publication; the controller is the entity ordering publication (for Government members' offices, their general secretariats).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.