A private entity in possession of biometric identifiers or biometric information must store, transmit, and protect from disclosure all biometric identifiers and biometric information using the reasonable standard of care within the private entity's industry. Storage and protection must be at least as protective as the entity's standard for other confidential and sensitive information (Section 15(e)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.