A person must not store information, or gain access to information stored, in a subscriber's or user's terminal equipment unless an exception in Schedule A1 applies; this covers instigating the storage or access and, unless otherwise provided, collecting or monitoring information the equipment emits automatically. The general exception is that the subscriber or user is given clear and comprehensive information about the purpose and consents, with consent at the first use sufficing for later use for the same purpose by the same person; consent can be signified by setting browser controls or through another application or programme. Consent has the UK GDPR meaning.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.