Provide consumer opt-out rights for: (a) processing personal data for targeted advertising, (b) sale of personal data (defined more narrowly than CCPA - exchange of personal data for monetary consideration), (c) profiling in furtherance of decisions that produce legal or similarly significant effects. NDPA does NOT require Universal Opt-Out Mechanism (UOOM) recognition (unlike Colorado/Connecticut/Texas) but controllers may voluntarily honour GPC + ADPPA signals. Maintain a clear and conspicuous opt-out method including a prominent link to a privacy choices page.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.