Personal data used to make a decision about an individual must be kept long enough for the individual to access it afterwards, and personal data must otherwise be kept only as long as its purposes require unless legislation or the IM on Office Admin: Management of Public Records requires retention for archival or other purposes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.