Articles 53 and 67: an applicant may seek access only for the Article 53(1) purposes (public or occupational health, policymaking and regulation, official statistics, which three are reserved to public sector bodies; health education; health research including product development and algorithm training; improvement of care); the application states identity and persons who will access, purpose and expected benefit, requested data, anonymised or pseudonymised form with justification, datasets to be brought in, proportionate safeguards against misuse and re-identification, processing period, tools needed, any ethics assessment and any opt-out exception, with a GDPR Article 6(1) basis for pseudonymised data; multi-country applications are submitted once and forwarded automatically.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.