The privacy policy must identify the categories of personally identifiable information collected and the categories of third parties with whom it may be shared, describe the process for an individual to review and request changes to their information, describe how the operator notifies users of material changes, and state the effective date.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.