Before consulting a SIC, a subscriber needs the consumer's express authorisation, by handwritten or digital signature or other expression of consent, stating the use to be made of the information; a request for or grant of credit or service creating a legal relationship counts as express consent and allows periodic consultation while the relationship lasts; authorisation is valid for two years (or the life of the relationship). Not needed for information requested by the Superintendencia or public bodies in official investigations (including drug trafficking, money laundering and terrorism) or tax authorities, for public-information, collection, score and insurance reports, for marketing lists, or for legal persons.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.