Before nonpublic personal information is disclosed to a nonaffiliated third party the institution clearly and conspicuously discloses to the consumer, in writing, electronic form or another form the section 504 regulations permit, that the information may be disclosed to such a third party, gives the consumer the opportunity before the initial disclosure to direct that it not be disclosed, and explains how the consumer can exercise that option.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.