Before the Attorney General may initiate an enforcement action, the controller or processor must have an opportunity to cure the alleged violation within 30 days of receiving notice from the AG. If the controller cures the violation and provides the AG with an express written statement that the violation has been cured and no further violations will occur, no action may be initiated. Unlike Colorado, Connecticut, and Virginia (which sunset their cure periods), the UCPA cure period is permanent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.