Articles 34 to 36 and 72 with Decree Article 66: collection, recording, processing, storage and transmission must be lawful, fair and not fraudulent; data are collected for specified, explicit and legitimate purposes and not further processed incompatibly; they are adequate, relevant and not excessive; they are kept no longer than necessary except for historical, statistical or research processing permitted by law; they are accurate and kept up to date, with inaccurate or incomplete data erased or rectified; at the end of the retention period they are destroyed, erased or archived under the rules on administrative archives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.