A signatory will disclose clearly in contracts or privacy policies, in a way that institutions and parents can easily find and understand, which types of Student PII it collects, if any, and the purposes for which it uses or shares that information with third parties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.