A platform must not, by automated monitoring or decision-making systems: (a) process personal data on a person's emotional or psychological state; (b) process personal data on private conversations, including exchanges with other persons performing platform work and their representatives; (c) collect personal data while the person is not offering or performing platform work; (d) process personal data to predict the exercise of fundamental rights such as association, collective bargaining and action, or information and consultation; (e) process personal data to infer racial or ethnic origin, migration status, political opinions, religious or philosophical beliefs, disability, state of health (including chronic disease or HIV status), emotional or psychological state, trade union membership, sex life or sexual orientation; (f) process biometric data to identify a person by comparison with stored biometric data in a database. The prohibitions apply from the start of recruitment or selection and to any automated system taking or supporting decisions that affect persons in any manner (recital 39 adds that consent is not a valid basis for processing their data).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.