On receiving a request it reasonably believes to be a valid Part 3 request for data it holds, a data holder may disclose voluntary consumer data and must, subject to rule 3.5, disclose the requested required consumer data to the consumer through its direct request service and under the data standards (civil penalty), with no fee for required consumer data. Joint account data may be withheld in the circumstances of rules 4A.10 and 4A.15. Part 3 is currently switched off for banking, non-bank lending and energy data (clauses 6.7 and 6.8 of Schedule 3 and 8.5 of Schedule 4).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.