Adhere to Oman PDPL Articles 25-28 covering automated decision-making + profiling + children + direct marketing. Automated decision-making and profiling per Article 25 requires (a) restriction of solely-automated decisions producing legal or similarly significant effects on individuals to specified lawful bases + (b) human review capability + explanation of decision logic + ability to contest + (c) safeguards for protected categories. Children and vulnerable data subjects per Article 26 requires (a) age verification + parental consent for processing of child data (typically under 18 in Oman per default + check sectoral specifics), (b) child-appropriate notices + privacy-preserving design, (c) heightened protections for sensitive contexts (health + education + safeguarding). Direct marketing per Article 27 requires (a) opt-in consent for marketing communications + (b) clear unsubscribe mechanism + (c) honor opt-out requests promptly + (d) align with Oman telecommunications + consumer protection law as applicable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.