A data holder or accredited person must comply with a Registrar request to provide the information the Registrar needs for requests to be processed (such as brand names, website and CDR policy links and the product data request service identifier), or updates, in the form specified (civil penalty up to $50,000 for an individual and $250,000 for a body corporate). Having provided such information, it must inform the Registrar, in the approved form and as soon as practicable, of any amendment needed once it becomes aware the information is out of date or needs amending for requests to be processed (same penalty).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.