A controller holding data about a consumer obtained from another source complies with a deletion request either by keeping a record of the request and the minimum data needed to keep the data deleted, used for nothing else, or by opting the consumer out of all processing other than exempt purposes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.