Sensitive PI is information that, if leaked or unlawfully used, may endanger personal dignity or safety, including biometrics, religious belief, specific identity, medical/health, financial accounts, location tracking, and any PI of minors under 14; it may be handled only for a specific purpose and sufficient necessity with strict protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.