The data subject may request review of decisions based on automated processing that adversely affect their interests or produce legal effects, including decisions defining personal, professional, consumer, credit or personality aspects, and may express their view and contest the decision; on request the controller must give clear, complete and adequate information on the criteria and procedures used, respecting commercial and industrial secrets, and must take appropriate measures to safeguard the data subject's rights.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.