After a financial or other commercial relationship ends, providers and users manage the personal credit information with strengthened access control until the FSC deadline, and delete it within at most five years (or within three months of the purpose being achieved, if earlier), except where needed for legal duties, urgent life, body or property interests, pseudonymised use for a Decree period, or Decree cases such as paying deposits and insurance claims or preventing insurance fraudsters from rejoining; retained data is kept separate from current customers' data, and data subjects are notified when separated data is used.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.