Articles 63 to 69 (Ley 11/2023 amendments in force 10 May 2023): the AEPD decides admissibility within three months and may forward a complaint to the DPO, a code monitoring body or ADR body, or, if none, to the controller or processor, who must respond within one month; showing corrective measures can lead to inadmissibility or closure; rights procedures last six months (silence counts as upheld), sanction procedures twelve months, warning procedures six months, prior investigations up to eighteen months; the AEPD may order provisional measures including blocking, cessation and immediate compliance with a right; it may prescribe mandatory complaint forms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.