Personal credit information shall be retained only for the period necessary for the original purpose, with separate storage required for information retained beyond five years after termination of the commercial relationship, and destruction performed by approved methods.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.