The operator must let the parent approve the operator collecting and using the child's personal information while declining its disclosure to third parties, unless the disclosure is integral to the service, and must get a distinct verifiable parental consent covering such disclosure; the direct notice must state which third parties, or which particular categories of them (the public included), will receive the information and the purposes, and that the parent may agree to collection and use while refusing disclosure. The 2018 Kids Seal Requirements already require the notice statement (IV.B); the amended Rule makes a separate consent for non-integral third-party disclosure a distinct requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.