Where a non-government agency uses personal data for marketing, it must stop immediately once the person refuses marketing, and at the first marketing contact it must provide a way to refuse and bear the cost of doing so.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.