Withdrawal does not affect the legality of processing agreed before it; it must be expressed in a printable, reproducible or verifiable format; on receiving a withdrawal request the controller or controlling and processing entity must notify the data subject of the potential consequences and damages; and once the withdrawal is expressed the controller, processor, controlling and processing entity and third party must cease processing and ask the relevant organizations and individuals to cease processing the data subject's data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.