Controllers need not re-identify data or keep data identifiable to answer requests, and need not comply with a request they cannot reasonably link to the data where they do not use it to recognise the consumer and do not sell or disclose it beyond processors. The access, correction, deletion and portability rights and the 59.1-578 duties do not apply to pseudonymous data where the controller shows the identifying information is kept separately under effective controls preventing its access (subsection D).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.