Sale of Consumer Health Data is prohibited without a written, statute-compliant Valid Authorization that includes specific data, recipient, purpose, expiration not exceeding one year, and consumer right to revoke.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.