Article 20 and additional provision 6: processing debt default data in common credit information systems is presumed lawful if the creditor supplied it, the debt is certain, due and enforceable and not disputed administratively, judicially or by binding ADR, the creditor warned the debtor in the contract or payment demand, the system notifies the debtor within thirty days with data blocked meanwhile, data are kept only while the default lasts and at most five years from maturity, consultation is limited to parties with a financing or payment relationship, and a refused applicant is told of the consultation result; debts under 50 euros of principal may not be included; system and creditor are joint controllers and the presumption does not cover credit scoring with data from other sources.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.