The data subject must be notified of any access made to their health or genetic data, and the controller must provide the traceability and notification mechanism that makes this possible.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.