The data holder must notify relevant holders when the requester gives, amends or withdraws an authorisation or it expires, and notify the requester when a holder fails to approve in time or withdraws approval, in accordance with the data standards, as soon as practicable after the event (unless the holder chose an alternative schedule) and through its ordinary means of contact (civil penalty). It must provide alternative notification schedules, including less frequent or no notifications, and a way for each holder to select and change them (civil penalty).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.