The authority may inspect a non-government agency suspected of breaching the Act or (under the 2025 text) to review its compliance, require statements, documents and cooperation, enter premises with IT, telecom or legal experts, and seize or copy data files, issuing receipts and records (ER 29, 30); the agency may not evade, obstruct or refuse without proper reason, may lodge an objection, and after an infringement the authority may prohibit collection or use, order deletion of files, confiscate or destroy unlawfully collected data, and publish the infringement with the agency's and responsible person's names. Clean inspection results may be published with consent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.