Electronic communication for direct marketing to a data subject is prohibited unless: the data subject's consent is obtained; the communication includes the sender's identity; the sender has a valid and complete contactable address; there is a clear indication that the purpose is direct marketing; and clear, uncomplicated opt-out/consent-withdrawal mechanisms are provided.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.