On request a controller must tell a data subject whether their data is processed and describe the data, purposes and recipients, and where a significant decision rests solely on automated evaluation, the logic involved; limited exceptions cover inaccurate data, lawful investigations and court orders.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.