Personal data collected for processing must be true, adequate, equitable and not excessive in relation to the purpose of collection; collection may not be by unfair, fraudulent, abusive, extortive means or contrary to the Law; data must be exact and updated where necessary; when inaccuracy or falsity is found the responsible party must, as soon as it knows, suppress, replace or complete the data with exact, true and updated data; and expired data under the Law must be eliminated.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.