A credit reference agency answering an access request under Article 15 of the UK GDPR need only cover personal data about the data subject's financial standing unless the data subject indicates otherwise, and any disclosure must be accompanied by a statement of the data subject's right under section 159 of the Consumer Credit Act 1974 to have wrong information corrected.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.