Where a requested record might contain a third party's personal, commercial, confidential or research information, the head must take all reasonable steps to inform the third party within 21 days by the fastest reasonable means (confirming in writing if told orally), describing the record, the requester, the relevant provisions and any public interest override, and that the third party may object or consent within 21 days. Within 30 days after informing every third party the head must decide, notify third parties and the requester with reasons and the right to complain to the Regulator or apply to court within 30 days, and, if granting, release only after that period unless a challenge is lodged.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.