An individual may obtain access to their personal information held by an organisation subject to a mandatory code, on the Commissioner's form or orally where reasonable; repetitious or vexatious requests may be disregarded only with the Commissioner's written authorisation and notice; refusals of access or correction can be reviewed by the Commissioner within six weeks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.