The controller must verify that the personal data it collects, or that is collected for its benefit, is relevant to the lawful purposes and adequate to achieve them; must ensure the data is accurate, complete and up to date for those purposes; and must not keep personal data for longer than necessary to achieve them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.