A controller must set up a process for a consumer to appeal a refusal to act within a reasonable time after receiving the decision; the process must be conspicuously available and similar to the request process, and the controller must tell the consumer in writing within 60 days of receiving the appeal what it did or did not do and why. Contract terms waiving or limiting the rights in 501.705 to 501.707 are void (501.708).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.