An operator must obtain verifiable parental consent before any collection, use, or disclosure of personal information from a child, and must give the parent the option to consent to collection and use without consenting to disclosure to third parties (except where integral to the service). Under the 2025 amendments, separate verifiable parental consent is required before disclosing personal information to third parties, including for targeted advertising.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.