Subject to UAE law and the public interest, the data subject may require erasure where the data is no longer needed for its purposes, consent is withdrawn, the data subject objects or the controller has no legitimate reason to continue, or the processing breaches the Decree-Law and erasure is needed to comply. Erasure may not be demanded for public-health data held by private facilities, where it would affect investigations or the claiming and defence of rights, where it conflicts with other legislation binding the controller, or in cases the Executive Regulations add.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.