A DPIA is required where processing is likely to result in high risk to rights and freedoms, particularly for systematic and extensive profiling, large scale processing of special categories, or systematic monitoring of publicly accessible areas.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.