On written notice the controller ensures significant decisions about the data subject are not based solely on automated processing; where they are, it notifies the person as soon as practicable, reconsiders on request within twenty-one days, and replies within fourteen days to notices with copies of refusals to the Office, which may order compliance (contract and legally required decisions excepted).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.