Without prejudice to civil/criminal liability, the Centre CEO notifies a violator to stop and remedy a violation within a set period; if unremedied, the Board may issue a reasoned decision: warning of partial/total suspension; suspension of the Licence/Permit/Certification; cancellation or revocation; publication of the proven violations at the violator's cost; or subjecting the controller/processor to the Centre's technical supervision at its own cost.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.