The database may hold personal information only in three cases: the name of a person connected to a kind of device on the Register, an authorised representative of the manufacturer, or an authorised representative of a person connected to a registered device. Information about a representative in the second or third case may be entered only after that representative consents in writing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.