Children's personal data must always be processed on the principle of protecting the child's rights and best interests; processing requires the consent of a child aged seven or over together with the consent of the parent or guardian as prescribed, except in the article 17 cases, and the controller, processor, controlling and processing entity and third party must verify the child's age before processing; processing must stop and the data be permanently erased or destroyed where the purpose was improper or has been completed, where the parent or guardian withdraws consent, or at the request of a competent authority with sufficient grounds that the processing affects the child's legitimate rights and interests.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.