Data that is confidential information about a person is not processed without consent except as a law provides and only in the interests of national security, economic welfare and human rights; processing without consent to protect the subject's vital interests lasts only until consent can be obtained; data is kept in identifiable form no longer than needed for its lawful purposes, with further processing for historical, statistical or research purposes allowed under proper protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.