Applies to a controller that conducts business in Colorado or targets Colorado residents and either controls/processes the personal data of 100,000+ consumers per year, or derives revenue or receives a discount from selling personal data and processes 25,000+ consumers' data; lists entity/data exemptions (e.g. GLBA, HIPAA, FCRA).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.