Controllers and processors must avoid bulk processing where not needed, limit collection to what the purpose requires, be able to show relevance, pseudonymise once direct identification is unnecessary (keeping keys separate), anonymise or delete data no longer needed, streamline data flows to avoid duplication, and use suitable data-minimising technology.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.