Controllers must provide a reasonably accessible and clear privacy notice that includes categories of personal data processed, purpose of processing, how consumers exercise rights and appeal, categories shared with third parties, categories of third parties, and a description of methods to submit requests.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.