On or after 1 October 2025 a credit reporting body must operate a ban notification service that tells individuals whose information is under a ban period about requests from providers and insurers for their credit reporting information. The body may require the individual's express written consent to use their credit reporting information to provide the notifications, may collect contact details to deliver them, and may with consent pass those details to another body that the individual asks the first body to notify, for that body's own service.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.