Access shall be refused on mandatory grounds including third party personal information, commercial information of third parties, and protection of safety of individuals and property, and may be refused on discretionary grounds including legal privilege and operations of the body.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.