Where a body or provider must meet complaints handling requirements under Australian law, a licence condition or an enforceable industry code, it must apply those requirements to Part IIIA complaints; otherwise it must comply with ISO 10002:2018 sections 4 (guiding principles), 5.2 (leadership and commitment), 6.4 (resources), 8.1 (collection of information) and 8.2 (analysis and evaluation). A credit reporting body must be a member of or subject to a recognised external dispute resolution scheme. An entity consulted by another about a complaint must take reasonable steps to respond as soon as practicable. Where the 30 day resolution period in Part IIIA will not be met, the body or provider must tell the individual before it ends, give the reason and expected timeframe, seek agreement to a reasonable extension, and advise of the right to complain to its external dispute resolution scheme with contact details or, for a provider without one, to the Commissioner.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.