A controller may not process sensitive personal data without obtaining the consumer's freely given, specific, informed, and unambiguous consent. Sensitive data includes racial/ethnic origin, religious beliefs, mental/physical health diagnosis, sexual orientation, citizenship/immigration status, genetic/biometric data, precise geolocation, and data of a known child.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.