Article 68 with Decree Articles 58 to 60: any person may object on legitimate grounds to processing of their data, except where processing meets a legal obligation; on written collection the form asks whether the person wishes to object; on other collection the question is put within a month by a means that keeps proof, failing which the objection applies automatically; for data obtained indirectly the person is also asked.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.