A controller must allow opt-out of targeted advertising and sale through an opt-out preference signal sent with the consumer's consent by a platform, technology or mechanism that is not a default setting, is easy to use, consistent with similar mechanisms and lets the controller tell Vermont residency and legitimacy; where the signal conflicts with a controller-specific setting or loyalty programme participation, the signal prevails, though the controller may notify the consumer and let them confirm the setting or programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.