Credit information providers, users, and credit inquiry companies shall process personal credit information only on a lawful basis including data subject consent, statutory authorisation, contract necessity, or vital interests, with consent collected separately for each purpose.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.