A consumer may invoke the rights at any time by telling the controller which rights they wish to use, and the parent or legal guardian of a known child (under 13) may invoke them for the child. The controller must comply with authenticated requests. Contract terms purporting to waive or limit these rights are void (59.1-578 B).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.