Under co-approval, the data holder must contact each relevant holder through its ordinary means, say that an accredited person has requested joint account data for the requester, that the requester has authorised it and co-approval applies, give the rule 4.23(1)(a) to (e) details, ask them to approve or not, state the deadline after which no approval means no disclosure, explain that any holder may withdraw approval at any time on the dashboard, and describe the effect of withdrawal.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.