Except as the Act provides, a controller may not process a consumer's sensitive data without the consumer's consent, or a known child's personal data without consent from the parent or lawful guardian in accordance with COPPA and its rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.