On written notice the controller must, within 30 days, stop or not start processing for direct marketing: erasing, destroying, making inaccessible or de-identifying data held only for marketing, or ceasing marketing use of data held for other purposes too, and must tell the data subject in writing what was done and any other purposes still served.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.