Article 26 sets the requirements for competent authorities (legal distinctness from operators, sufficient resources, technical expertise, independence). Article 27 grants natural and legal persons the right to lodge a complaint with the competent authority for breaches of the Regulation. Article 28 grants the right to an effective judicial remedy against binding decisions of competent authorities and against decisions of data intermediation service providers / data altruism organisations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.