The data subject may obtain confirmation of processing and access with the information in Article 14, with special regard to the rights of persons who supplied the data. Access may be restricted wholly or partly only while necessary and proportionate for a purpose in Article 55(3). The controller must inform the data subject in writing without undue delay of a refusal or restriction and the reasons (unless giving them would undermine that purpose), always stating the possibility to complain to the Commissioner; it must document the factual and legal reasons for the refusal and make them available to the Commissioner.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.