The Act applies to processing in the context of the activities of a controller's or processor's establishment in Sweden, by controllers not established in Sweden but in a place where Swedish law applies under international law, and by controllers or processors established only in third countries when processing concerns data subjects in Sweden in connection with offering them goods or services or monitoring their behaviour there. The child consent rule in 2:4 applies to children living in Sweden wherever the controller or processor is established.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.