DPAs must identify and weigh the benefits that may flow from the processing to the controller, consumer, other stakeholders and the public against the potential risks to the rights of the consumer, as mitigated by safeguards. The Attorney General may request a DPA pursuant to a civil investigative demand and the DPA is confidential and not subject to FOIA disclosure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.