A data subject may withdraw consent in writing at any time where processing rests on consent under Schedule I or II (earlier processing stays lawful), and may ask in writing that the controller stop further processing that relies on public-interest or official-authority tasks or legitimate interests (Schedule I items (e) and (f), or Schedule II item (f)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.