Obtain affirmative opt-in consent before processing sensitive data including racial or ethnic origin + religious beliefs + mental or physical health condition or diagnosis + sex life or sexual orientation + citizenship or immigration status + genetic data + biometric data + precise geolocation + financial information that includes account number/credit/debit card number with required security code/access code/password + status as transgender or non-binary + data of known children under 13. NJ DPA UNIQUE: financial account information is sensitive data + transgender/non-binary status protected as sensitive (strongest such protection in US state privacy laws). Process children under 13 per COPPA + parental consent. Adolescents 13 to under 17 require opt-in for sale of personal data + targeted advertising + profiling.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.