Every data subject or any of their heirs may ask the controller whether their data are being processed. The controller must, on request, give the data subject or heir a copy of the data concerning them, in an intelligible form where the data are coded, compressed or encrypted, and on request the additional information: the purposes, categories, source, subject and nature of the processing, and the persons and categories to whom the data are sent or who may see them, with when and why. Refusing to answer within ten working days, or answering wrongly or incompletely, is fined one to fifteen million Lebanese pounds (Article 107).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.