A controller or processor given an assessment notice must permit the Commissioner to enter specified premises, direct it to documents and equipment, help it view information, supply copies, explain material, allow observation of processing and interviews of willing staff, and, since 5 February 2026, arrange and pay for a report on a specified matter by a person approved by the Commissioner (nominating a person within the specified period and giving the approved person all reasonable assistance, section 146A). Timing follows the appeal period unless urgent (seven days, or sooner where a failure or offence is suspected and premises are not domestic). Privileged communications and special purposes processing are protected.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.