The operator must post a prominent, clearly labelled link to an online notice of its children's information practices on the home or landing page or screen and at each area where personal information is collected from children, close to the requests for information (and on the landing page of any children's area of a general audience service). The notice must state: the name, address, phone and email of all operators collecting or maintaining children's information (or one responding operator with all named); what is collected, whether children can make it public, how it is used, disclosure practices including the identities and specific categories of third parties and purposes, and the data retention policy under 312.10; where persistent identifiers are collected for support for internal operations under 312.5(c)(7), the specific internal operations and the means used to prevent their use to contact an individual, behavioural advertising or profiling; where audio files of a child's voice are collected under 312.5(c)(9), how they are used and that they are deleted immediately after responding; and, if applicable, that the parent can review or delete the child's information and refuse further collection or use, with the procedures.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.