Where the controller, processor or third party knows that personal data belong to a child under sixteen, it must obtain the consent of a holder of parental responsibility in accordance with relevant laws; consent on behalf of the child is acceptable only if given in the child's interest; consent is not required where processing is necessary to protect the child's vital interests.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.