The consumer may have personal data provided by or obtained about them deleted. Where data came from a source other than the consumer, the controller complies either by keeping a minimal suppression record to ensure the data stays deleted (and using it for nothing else) or by opting the consumer out of all non-exempt processing (59.1-577 B 5).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.