Per Peru Law 29733 + Supreme Decree: consent + notice + sensitive data. Requirements include (a) obtain Informed Consent that is free + prior + express + informed + unambiguous with mechanism for withdrawal + (b) provide Privacy Notice and Transparency including identity of controller + purposes + categories + recipients + retention + rights + transfer + (c) implement Sensitive Data Processing Restrictions including stricter consent + safeguards for health + biometric + ideological + political + sexual orientation + (d) implement special consent mechanisms for sensitive data + (e) maintain records of consent + privacy notices + (f) maintain change management for consent + notice updates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.