Provide a reasonably accessible + clear + meaningful privacy notice per NH RSA 507-H:6 including: (1) categories of personal data processed, (2) purposes of processing, (3) how consumers exercise rights and appeal, (4) categories of personal data shared with third parties, (5) categories of third parties, (6) clear and conspicuous opt-out method. Apply data minimisation - process only personal data adequate + relevant + reasonably necessary in relation to disclosed purposes. Apply purpose limitation - do not process personal data for incompatible purposes without consent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.