Sensitive data may be processed for statistical purposes under Article 9(2)(j) where necessary and where the public interest in the statistics project clearly outweighs the risk of undue intrusion into individuals' privacy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.