Article 73: unless the person expressly consents, personal data collected by electronic certification service providers to issue and keep certificates for electronic signatures must be collected directly from the person and processed only for the purposes for which they were collected.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.