Florida Statutes 501.707-711. CONTROLLER RESPONSIBILITIES (501.707): (a) PURPOSE LIMITATION - limit personal data collection + retention to what is adequate + relevant + reasonably necessary for the specified purpose; (b) DATA MINIMISATION; (c) PROHIBITION on processing personal data for purposes neither reasonably necessary to + compatible with the disclosed purposes; (d) AVOID PROCESSING in violation of FDBR + state + federal anti-discrimination laws; (e) IMPLEMENT REASONABLE administrative + technical + physical safeguards. DATA PROTECTION ASSESSMENTS (501.708): controllers MUST CONDUCT DPAs for processing activities involving (a) sale of personal data; (b) targeted advertising; (c) profiling presenting reasonably foreseeable risk of unfair or deceptive treatment / unlawful disparate impact / financial / physical / reputational injury / intrusion on private affairs / other substantial injury; (d) sensitive data; (e) processing of minors. DPA contents: weigh benefits of processing against risks to consumer with mitigation measures. PROCESSOR OBLIGATIONS (501.71): written contract with controller specifying processing scope + duration + categories + safeguards + subprocessor authorisation + return/deletion + audit cooperation. PRIVACY NOTICE (501.711): reasonably accessible + clear + meaningful + including categories collected + purposes + categories shared + categories sold + opt-out methods + rights process + identity verification + appeals + AG contact. SEARCH ENGINE POLITICAL BIAS DISCLOSURE (501.713): search engines must disclose if + how they manipulate search results for political or ideological reasons (UNIQUE Florida requirement).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.