When disclosing personal data or transferring it to a processor the controller must take into consideration that the disclosure or transfer is in line with the lawful purposes and that the data is processed in accordance with the Law.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.