Before using training data that contains personal information, the provider must obtain the consent of the individuals concerned or satisfy another circumstance permitted by laws and administrative regulations; before using training data that contains sensitive personal information it must obtain the individuals' separate consent or satisfy another permitted circumstance, consistent with the Personal Information Protection Law.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.