Under the Model Procedure consent is taken in writing or electronically (accepting a public offer that states the purposes counts), must identify the operator and subject, purposes, data, validity period and any consent to third-party, cross-border or public disclosure; data must be destroyed no later than the next working day after consent is withdrawn, within three days when a destruction trigger occurs, and within one working day where processing is unlawful on request of the subject, a court or a competent body.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.