Decisions based solely on automated processing, including profiling, that produce an adverse legal effect or significantly affect the data subject are prohibited unless provided by law with appropriate safeguards and at least the right to human intervention by the controller. Such decisions may not be based on sensitive data without suitable safeguards, and profiling that results in discrimination on the basis of sensitive data is prohibited.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.