No person may process sensitive personal data without the subject's prior written consent, which can be withdrawn at any time without charge; consent for minors or persons unable to consent comes from a parent, guardian or other lawful representative; exceptions cover legal obligations, vital interests, legal claims, data the subject made public, research under Commission guidelines and supervised medical care.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.