Articles 21, 22 and 101: natural and legal persons may complain, individually or collectively, to the digital health authority about Chapter II; complaints on the rights in Articles 3 and 5 to 10 go to the GDPR supervisory authority, which becomes the sole contact point and may fine up to the GDPR Article 83(5) level; authorities inform complainants of progress, cooperate across borders, and provide accessible complaint tools; persons may mandate a qualifying not-for-profit body to complain for them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.