Provide privacy notices, manage consent and opt-out where applicable, and apply the Common Agreement privacy obligations to all data exchanged, including special protections for sensitive categories.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.