Article 37-2 with Decree Articles 44-2 to 44-4: where a decision made by a fully automated system (including AI, excluding administrative automated dispositions) significantly affects a person's rights or duties, they may refuse it unless it rests on consent, law or contract; for any automated decision they may request an explanation or review; the controller must then not apply the decision or reprocess it with human involvement, or give a concise, meaningful explanation (result, main data types, main criteria, process), or consider submitted opinions, within 30 days (extendable twice by 30); it publishes the criteria, procedures and processing methods of its automated decisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.