Provide reasonably accessible clear and meaningful privacy notice under Section 14-4605 disclosing: (i) categories of personal data processed; (ii) purpose(s) of processing; (iii) how consumers may exercise rights under Section 14-4603 including appeal; (iv) categories of personal data shared with third parties; (v) categories of third parties with whom personal data shared; (vi) ACTIVE EMAIL ADDRESS or other online mechanism for consumer to contact controller; (vii) sale disclosure (whether controller sells personal data + opt-out mechanism); (viii) targeted advertising disclosure (whether controller engages + opt-out mechanism); (ix) biometric data and consumer health data specific disclosures including third-party categories; (x) processing of personal data of consumers between 13 and under 18 years disclosure; (xi) opt-out preference signal recognition (Global Privacy Control). Notice must be readable in language of the affirmative agreement to terms of service. Bilingual or multilingual notice where consumer population requires. Updates with material change notification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.