Each assessment must identify and weigh the direct and indirect benefits to the controller, consumer, other stakeholders and the public against the risks to the consumer's rights as mitigated by safeguards, factoring in de-identified data, consumers' reasonable expectations, context and the relationship; one assessment may cover comparable operations, and an assessment made for other laws counts if of comparable scope and effect.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.