A controller that sells personal data to third parties, or processes it for targeted advertising, sale or profiling in furtherance of decisions that produce legal or similarly significant effects, must clearly and conspicuously disclose that sale or processing and the manner in which a consumer may exercise the right to opt out of it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.