Service providers must report to the DOJ Office of Cybercrime their compliance with Chapter IV of the Act and Rules 7 and 8 of the IRR; the Office monitors that compliance (IRR Section 28(f)), and failure to comply with orders under Chapter IV is punished as obstruction of justice under Presidential Decree No. 1829, prision correccional in its maximum period or PHP 100,000 or both for each non-compliance (Act Section 20, upheld in Disini; the Rule on Cybercrime Warrants notes it must be knowing or wilful).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.