Sensitive data (racial or ethnic origin, political opinions or associations, religious or philosophical beliefs, professional, trade or union membership, sex life, criminal, educational, financial or employment history, gender, age, marital or family status, health and genetic information, and other high-risk information) may be processed only with written consent, withdrawable at any time free of charge, unless an exception applies: employment law obligations, vital interests where consent cannot be given, members of non-profit bodies, national security laws, legal claims, data made public by the subject, scientific research under Authority conditions, or substantial public interest authorised by law. Data on sex life may be processed only by recognised bodies under specific authorisation. Contravention is an offence (s.33(2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.