The controller may not process a customer's sensitive data without the customer's consent, and may not process sensitive data of a known child unless consent is obtained and the data are processed in line with COPPA; controllers and processors that meet COPPA's verifiable parental consent requirements are deemed compliant with any parental consent obligation under the Act. Applies to for-profit entities doing business in Rhode Island or targeting products or services to its residents that in the preceding calendar year controlled or processed personal data of at least 35,000 customers (excluding data processed solely to complete a payment) or of at least 10,000 customers while deriving more than 20 percent of gross revenue from selling personal data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.