Articles 57 and 58: access bodies decide on applications and requests, issue permits, provide access in secure environments, supervise users and holders, request, combine, pseudonymise or anonymise data, protect IP and trade secrets, oversee quality labels, keep a management system of applications and permits, publish the national dataset catalogue, each application on receipt, all permits, approvals and refusals with reasons within 30 working days, enforcement measures and results, and inform the public on legal bases, safeguards, rights, recipients and outcomes; they facilitate opt-out where assigned, pass significant findings to holders for the person or their clinician (who may decline them), and cooperate with supervisory authorities and the EHDS Board.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.