Subjects who verify identity may obtain or view their credit information; where it is wrong they may request correction; the company then stops providing and using the information, investigates, deletes or corrects what is wrong or unverifiable, tells recipients of the last six months and anyone the subject names, and informs the subject of the result within 7 days; the subject may seek correction from the FSC, or from PIPC for commercial enterprises, and the company reports its corrective action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.