The controller and processor must ensure personal data are processed lawfully, fairly and transparently; collected for explicit, specified and legitimate purposes and not further processed incompatibly; related to the purposes for which processing was requested; accurate and where necessary kept up to date, with inaccurate data erased or rectified without delay; kept in a form permitting identification for no longer than necessary for the purposes; and processed in compliance with the rights of data subjects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.