Article 36: a data subject who has accessed their information may request correction or deletion (unless another law requires its collection); the controller investigates without delay, corrects or deletes as requested, informs the data subject of the result, deletes irrecoverably, and tells the person promptly if deletion is barred.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.