An accredited person must give each eligible consumer on whose behalf it makes a consumer data request an online dashboard that lets the consumer manage requests and consents, shows for each consent the data covered, the specific uses, when it was given, whether it is single-occasion or ongoing and (if ongoing) the period and how often data has been and will be collected or disclosed, for insight consents a description of the insight and its recipient, whether a business consumer statement was given, when the consent expires or expired, the collection and disclosure information required by rules 7.4 and 7.9, sponsor name and accreditation number where an affiliate's data is collected by a sponsor, and each amendment; states that further records can be requested under rule 9.5 and how; lets the consumer withdraw a current consent at any time, with a data-standards message on the consequences; lets the consumer elect, and withdraw an election, for deletion of redundant data; and is simple, straightforward, prominently displayed and readily accessible (civil penalty; reasonable steps suffice for simplicity). It may allow amendment of a current consent, and a CDR representative principal may have its representative provide the dashboard on its behalf.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.