Personal information is collected on a lawful basis (consent, legal obligation, contract and the like); consent is obtained by a proper method and at a proper time with clear notice and legally important items highlighted; for children under 14, the legal guardian is informed and consents, only the minimum data needed to obtain that consent is collected, guardian status is verified and notices to children use clear child-friendly language; consent records are kept; data processed without consent is disclosed separately in the privacy policy with its legal basis; and additional use without consent follows criteria on relevance to the original purpose, foreseeability, harm and safeguards, published where it is recurring (PIPA Articles 15, 22 and 22-2).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.