Conventional electronic documents that are about a specific individual, their property or their account and are password-protected or otherwise secured are excepted; the exception covers only documents meeting both conditions, and the entity still owes effective communication to the individual under its other Title II duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.