Children's and adolescents' data must be processed in their best interest. Children's data need specific, highlighted consent from at least one parent or legal guardian, and the controller must make reasonable efforts, using available technology, to verify that the consent came from the person responsible; controllers must keep public the types of data collected, how they are used and how to exercise the Art. 18 rights. Without that consent, data may be collected only to contact the parents or guardian (used once and not stored) or for the child's protection, and never passed to third parties. Participation in games, internet applications or other activities may not be conditioned on providing more personal data than strictly necessary, and information must be given simply, clearly and accessibly, suited to the child's characteristics, with audiovisual resources where appropriate.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.