Article 42: data on offences, criminal convictions or security measures may be processed only by courts, public authorities and legal persons running a public service acting within their legal powers, and by auxiliaries of justice strictly for their legal missions; such processing also needs CDP authorisation (Article 20).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.