Persons who legitimately obtain information from a database that processes it must use it confidentially and exclusively for the habitual operations of their business, with any dissemination to third parties prohibited; persons who by their employment or other relationship with the responsible party have access to or intervene in any phase of processing must keep strict professional secrecy over data collected from sources not accessible to the public (article 302 of the Penal Code), except on order of a competent court or with the data subject's consent, and the obligation continues after the relationship ends.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.