Articles 5 to 7: data are processed lawfully, fairly and transparently; collected for specified, explicit and justified purposes and not further processed incompatibly (compatibility assessed on the link between purposes, context, nature of the data, consequences and safeguards such as encryption or pseudonymisation; further processing for archiving, research or statistics is compatible under Article 92); adequate, relevant and limited to what is necessary; accurate and kept up to date; kept in identifiable form no longer than needed; and protected by appropriate technical, organisational and staffing measures; the controller is responsible for and must demonstrate compliance (accountability).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.