The controller must not deny goods or services, charge different prices or provide lower quality because a consumer exercised a right (loyalty programs and offers tied to opting out of targeted advertising are allowed), need not provide a service that requires data the consumer withholds, and any contract term waiving or limiting consumer rights is void.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.