A person must not store information, or gain access to information stored, in a subscriber's or user's terminal equipment, including by instigating the storage or access and by collecting or monitoring information the equipment emits automatically, unless an exception in Schedule A1 applies. The general exception is that the user is given clear and comprehensive information about the purpose and consents; consent can be signified through browser settings or another application, and it is enough to meet the requirement at the first use for the same purpose. The Secretary of State may add, vary or remove exceptions by affirmative regulations after consulting the Commissioner.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.