A public communications provider may process traffic data under regulation 7(2) or (3) only after telling the subscriber or user which types of traffic data are processed and for how long, and for marketing or value added services before consent is sought. Processing must be limited to managing billing or traffic, customer enquiries, preventing or detecting fraud, marketing electronic communications services or providing a value added service, and must be carried out only by the provider or someone acting under its authority. Traffic data may still be given to a competent authority for settling disputes under an enactment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.