Subject to the qualifications, individuals can exercise choice about the use of their personal information, normally at collection for later uses, or after collection but before a use unrelated to the collection purpose or a disclosure to third parties other than service providers; the mechanisms must be in place and operational. Requirement 15 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.