When a data subject files a rights protection request (within 15 business days of the controller's answer, or after the response period lapses), the controller must answer within 15 business days, offer evidence and state its case, and where the request concerns an unanswered ARCO request, show within 10 business days that it answered in time or answer it. A favourable resolution must be made effective within 10 business days of notification (or a longer period the resolution sets) and compliance reported in writing to the Secretariat within the following 10 business days; where the procedure followed a non-response, compliance is at no cost to the data subject, the controller bearing reproduction and shipping. In verification the Secretariat has access to the information and documents it considers necessary; obstructing verification is an infraction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.