Controllers using pseudonymous or deidentified data must take reasonable steps to comply with contractual obligations attached to it and promptly address breaches of those obligations; access, deletion and portability rights do not apply to pseudonymous data kept separately under appropriate measures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.