The data subject may request erasure in writing or electronically where the data are no longer necessary for the purposes, consent is withdrawn with no other legal ground, the data subject objects and no overriding legitimate grounds exist, or the data were unlawfully processed; a controller that disclosed the data to a third party or posted it publicly must inform third parties processing it that erasure of links to or copies of the data has been requested; erasure does not apply so far as processing is necessary for public interest reasons, historical, scientific or statistical purposes, compliance with a legal obligation or a public-interest or official-authority task, or legal claims in the controller's interest; the controller informs the data subject within 30 days, with appeal to the supervisory authority within 30 days and its response within 60 days.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.