A request by an accredited person to give or amend a consent must comply with the relevant data standards; must, having regard to the Data Standards Body's consumer experience guidelines, be reasonably easy to understand, using plain concise language and visual aids where appropriate; must not include or refer to the CDR policy or other documents in a way that reduces understandability; and must not be combined with other requests except for other consents under the rules (and never with a request for direct marketing or de-identification consent).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.