Decisions by a public authority acting as controller under GDPR Articles 12(5) and 15 to 21 can be appealed to the administrative courts (not those of the government, supreme courts or Parliamentary Ombudsmen); IMY decisions under the GDPR and fine decisions can be appealed there too, with IMY as the opposing party, as can decisions on private archives and offence data; leave to appeal is needed in the administrative court of appeal, and other decisions under the GDPR or the Act cannot be appealed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.