Personal data may only be processed with the consent of the data subject unless an exception applies. Consent must be free, specific, informed and unambiguous, and may be revoked at any time.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.