Holding a valid request under rule 4.3 or 4.3A, an accredited person may ask a data holder to disclose CDR data that is the subject of the collection, use and disclosure consents and can be collected, used and disclosed in compliance with the data minimisation principle. It must make the request using the data holder's accredited person request service and in accordance with the data standards (civil penalty). No fee may be charged for required consumer data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.