The project shall comply with the children's data protection regime, or equivalent legislation, of each jurisdiction where the product or service is in use or in operation (Annex E has examples), and shall collect and keep online no more personal data than the minimum needed to deliver those elements of the product or service with which the child is actively and knowingly engaging, as data minimisation requires.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.