Organizations and individuals involved in personal data processing must apply protection measures to prevent unauthorised collection of personal data from their service equipment and systems; setting up software systems, technical measures or activities that collect, transfer, buy or sell personal data without the data subjects' consent is illegal.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.