Anyone who collects, processes, holds or uses personal data is accountable to the data subject, processes fairly and lawfully, keeps data adequate, relevant and not excessive, retains it only as authorised or needed, ensures its quality, ensures transparency and the data subject's participation, and observes security safeguards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.