Data subjects have the right not to be subject to decisions based solely on automated processing, including profiling, with legal or similarly significant effects, unless they consented or a law provides for it; regulation 10(3) repeats this duty and regulation 10(5)(f) bars such decisions affecting children's rights.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.