The volume and content of personal data processed must be adequate to and not excessive in relation to the purposes of processing. Collection should be limited to what is necessary.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.