The controller must offer a conspicuous appeal process similar to the request process, answer each appeal in writing within 60 days with reasons, and on denial give the consumer the Attorney General's online complaint mechanism.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.