Where a controller sells personal data to third parties or processes for targeted advertising, it must clearly and conspicuously disclose this and the manner to opt out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.