When a company learns that personal credit information has been leaked outside business purposes, it notifies the subjects without delay with the PIPA Article 34(1) items, takes measures to minimise damage, and above the Decree scale reports the notification and measures without delay to the FSC or designated body (or to PIPC for commercial enterprises), which may investigate and require corrections.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.