Switch profiling options off by default unless there is a compelling reason (for example accessibility needs, or news feeds under editorial codes), with separate settings for each type of profiling rather than catch-all personalisation, behavioural advertising always off by default and consent-based (with parental consent under 13 and PECR consent for cookies), age-appropriate information and prompts when profiling is switched on, and profiling allowed only with measures that stop harmful effects, in particular recommending content detrimental to health or wellbeing (such as age-inappropriate, pro-self-harm or engagement-extending content), tested through the DPIA; where such safeguards are not feasible, content-recommendation profiling must not be offered to children.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.