If an accredited person lets consumers amend consents, it must let them do so in the same way it asks for consents, give the rule 4.11(3) information plus a statement of the consequences of amending and a statement that it may continue to use data already disclosed to it to the extent the amended consent allows, and, for a consent given as a CDR business consumer, take reasonable steps to re-confirm the consumer is not an individual or has an active ABN.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.