Controllers and processors are prohibited from collecting, transferring, storing, processing or disclosing sensitive personal data except under a licence from the Centre, and (save where authorised by law) must obtain the data subject's explicit written consent. Processing children's data requires the legal guardian's consent, and a child's participation in a game, competition or activity may not be conditioned on submitting more personal data than necessary for participation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.