Controllers run an appeal process for refused requests, conspicuously available and similar to the request process, and within 60 days inform the consumer in writing of the action taken or not taken with reasons. If the appeal is denied, the controller provides an online mechanism, if available, or other method to complain to the Attorney General.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.