Privacy notices must disclose identity of the controller, purposes, lawful basis, retention, recipients, transfer destinations, rights, and Commission complaint route in plain language.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.