Per UK Data Protection Act 2018 Parts 1-2: UK GDPR + general processing + scope.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.