Article 71 PSU notification obligation: PSU must notify the PSP without undue delay on becoming aware of any unauthorised / incorrectly executed transaction and no later than 13 months after the debit date. Article 74 liability of the payer: in case of unauthorised payment transaction the payer's maximum out-of-pocket liability is EUR 50 (reduced from EUR 150 under PSD1) unless the payer (a) was unable to detect the loss before payment + (b) the loss was not caused by acts or omissions of an employee + agent of the PSP; the payer bears all losses if acted fraudulently or with gross negligence; the payer is not liable after notification under Article 69. Article 75 PSP refund obligation: PSP must refund the payer with effect from the date the debit was made for an unauthorised transaction immediately and in any event no later than the end of the following business day, after the PSP has become aware of or has been notified of the transaction unless the PSP has reasonable grounds for suspecting fraud (in which case the PSP shall notify the relevant national authority in writing). Article 76-77 set the refund regime for authorised direct debits within 8 weeks of debit (provided that the underlying authorisation does not specify the exact amount + the exact amount exceeded what the payer could reasonably have expected).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.