Clarifies the handling of data subject access requests, including that controllers need only carry out reasonable and proportionate searches and that the response clock can be paused while seeking clarification or identity verification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.