Processing must respect human dignity, private life and public freedoms and must never be used to harm people or their reputation; data may be collected only for lawful, determined and explicit purposes, processed fairly and only as far as the purposes require, and the controller must keep them accurate, precise and up to date. Collecting for unlawful purposes or knowingly processing inaccurate, outdated or unnecessary data is an offence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.