The head must refuse where disclosure would unreasonably disclose a third party's personal information (unless, for example, consented, public, provided on notice of publication, a minor or incapable person in the requester's care, a deceased person's next of kin requests, or it concerns an official's position), third-party trade secrets or harmful commercial information or information supplied in confidence, breach a contractual duty of confidence, endanger life or physical safety, reveal legally privileged material not waived, or expose third-party research to serious disadvantage. The head may refuse where disclosure would prejudice the security of property, systems or protection plans, reveal the body's own trade secrets, harmful commercial information, negotiating position or owned software, or expose the body's own research to serious disadvantage. Product or environmental test results revealing a serious public safety or environmental risk cannot be withheld on commercial grounds. Frivolous or vexatious and resource-diversion grounds do not apply to private bodies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.