The Authority may inspect information held by controllers and processors, direct them to comply (including publishing their processing terms), examine people under oath, enter premises and seize records where there is imminent risk, evaluate processing and management programmes periodically, and after an inquiry issue binding written directives to stop conduct, take corrective action or pay compensation to a person harmed; directives take effect on communication.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.