If a controller sells personal data to third parties or processes personal data for targeted advertising the controller must clearly and conspicuously disclose this processing and the manner in which a consumer may exercise the right to opt out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.