Sensitive data may be processed for archiving in the public interest under Article 9(2)(j) where needed to follow archive rules; for controllers outside archive rules it requires regulations or an individual decision (with possible conditions) by the authority the government designates (Riksarkivet under the Ordinance).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.