A provider given a written periodic reporting notice must prepare reports on the extent to which it complied with the applicable expectations (or specified ones) at the regular intervals in the notice (not shorter than 6 nor longer than 24 months), in the manner and form specified, and give each report within the period set (at least 28 days after the interval ends, or a longer period allowed). Compliance is required to the extent the person is capable; 500 penalty units; formal warning, infringement notice, enforceable undertaking and injunction available; non-compliance may be published (s 55(1)). In choosing recipients the Commissioner considers complaint volumes in the past 12 months, past contraventions, deficiencies in practices or terms of use, and whether the provider already reports to the Secretary. Reports are not excused on self-incrimination grounds (s 63).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.