Fiji Data Protection Bill 2020 Part III - Rights of Data Subjects. SIX RIGHTS (mirror GDPR Chapter III): (1) RIGHT OF ACCESS - data subject may request confirmation + copy of personal data + processing purposes + categories + recipients + retention + rights information; controller must respond within 30 days (extendable by 60 days for complex requests); first copy free + reasonable fee for subsequent copies; (2) RIGHT TO RECTIFICATION - data subject may request correction of inaccurate or incomplete data; controller must rectify without undue delay; (3) RIGHT TO ERASURE / BE FORGOTTEN - data subject may request deletion when (a) data no longer necessary for purpose; (b) consent withdrawn + no other lawful basis; (c) objection sustained; (d) unlawful processing; (e) legal obligation requires deletion; (f) child consent withdrawn; (4) RIGHT TO DATA PORTABILITY - data subject may receive personal data provided + in structured + commonly used + machine-readable format + transmit to another controller (where automated processing + consent or contract basis); (5) RIGHT TO OBJECT - data subject may object to processing based on legitimate interests + public interest + direct marketing (absolute right) + research; controller must cease unless compelling legitimate grounds override (except for direct marketing which is unconditional); (6) AUTOMATED DECISION-MAKING + PROFILING - data subject may not be subject to decision based solely on automated processing producing legal or similarly significant effects, with limited exceptions (consent + contract necessity + legal authority).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.