Sensitive information and unique identifiers other than resident registration numbers are processed only with separate consent or a specific legal basis, and where information disclosed in providing a service could reveal sensitive information and risk privacy, data subjects are told clearly before service how to choose whether it is made public (PIPA Articles 23 and 24).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.