A regulated entity must maintain a distinct, prominently linked Consumer Health Data Privacy Policy on its homepage that lists categories of data collected, purposes of collection, categories of sources, categories of recipients, and the consumer rights process.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.