Personal data may be processed without the data subject's consent only in urgent cases where immediate processing is necessary to protect the life and health of the data subject or others (with the controller, processor, controlling and processing entity and third party responsible for proving it), where disclosure is provided by law, where competent state agencies process data in emergencies of national defence, security, social order, major disaster or dangerous epidemic, threats short of a declared emergency, riots, terrorism, crime and law violations, to fulfil the data subject's contractual obligations with relevant agencies, organizations and individuals as prescribed by law, or to serve the activities of state agencies under specialised laws.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.