A compliance programme exists where the creditor or lessor obliges staff and agents to follow procedures (or runs automated procedures) built to secure compliance with the Act and regulations, has methods that systematically find weaknesses in the programme, and fixes those weaknesses promptly. A person has a defence to statutory damages, prosecution and pecuniary penalty proceedings if it proves that a reasonable mistake, or events beyond its control, caused the breach and that it took reasonable precautions and exercised due diligence, and the court must take the existence of an appropriate compliance programme into account in deciding whether a breach was a reasonable mistake.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.