If a controller sells personal data to third parties or processes personal data for targeted advertising, the controller shall clearly and conspicuously disclose this and the manner in which a consumer may exercise the right to opt out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.