The controller must tell the data subject in writing, without undue delay and within the applicable time period, whether a rectification, erasure or restriction request is granted and, if refused, the reasons and the rights to ask the Commissioner to check, complain to the controller and the Commissioner and apply to court (reasons may be restricted on the section 44 grounds, with a recorded reason). After rectifying it must notify the competent authority the inaccurate data came from; after rectifying, erasing or restricting disclosed data it must notify recipients, who must do the same; and it must tell the data subject before lifting a restriction imposed because accuracy was contested.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.