Personal data is disseminated with the data subject's consent, or without it only where a law provides and, where necessary, in the interests of national security, economic welfare, human rights and for the national census; the party disseminating ensures the required protection and the recipient takes measures to meet the Law beforehand; third parties that refuse or cannot ensure compliance are denied access.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.