Controllers must not process sensitive data without obtaining the consumer's freely given, specific, informed and unambiguous consent (opt in). Sensitive data of a known child must be processed in accordance with COPPA. Sensitive data includes racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data for unique identification, data of a known child and precise geolocation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.