Per Thailand PDPA: consent + sensitive data handling. Requirements include (a) obtain Consent that is freely given + specific + informed + unambiguous + clearly distinguishable from other matters + with mechanism for withdrawal + (b) implement special protections for Sensitive Personal Data including health + biometric + genetic + race + religion + political + sexual orientation + criminal records + requiring explicit consent or specific legal basis per PDPA + (c) implement Children's Personal Data of Minors protections requiring parental consent per Thailand civil age + (d) maintain records of consent including how + when obtained + purpose + withdrawal + (e) integrate consent + sensitive data handling with privacy programme + (f) maintain change management for consent updates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.