A data holder must make the pre-approval and non-disclosure options available for each joint account and may offer the co-approval option; the pre-approval option applies by default unless a sector Schedule provides otherwise, and the option may be changed only under rules 4A.7 and 4A.8. Under pre-approval, each other holder is taken to have approved a disclosure the requester authorises, and if an approval is withdrawn the data may not be disclosed despite the authorisation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.