Notify CITRA where subscribers' personal data is disclosed to any affiliate or parent company of the provider or to a third party, directly or indirectly; the provider remains responsible for protecting the privacy of the data shared. (The 2021 text required CITRA's written consent for such disclosure; 2024 requires notification.)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.