Georgia DPL Data Subject Rights (Articles 21-26 - GDPR Chapter III aligned post-2023). RIGHTS: (1) RIGHT TO INFORMATION + TRANSPARENCY (Art. 21) - clear + accessible + at-collection notice; (2) RIGHT OF ACCESS (Art. 22) - confirmation + copy + purposes + categories + recipients + retention + rights information + cross-border transfers; (3) RIGHT TO RECTIFICATION (Art. 23) - correction of inaccurate or incomplete data; (4) RIGHT TO ERASURE / BE FORGOTTEN (Art. 24) - deletion when data no longer necessary + consent withdrawn + objection sustained + unlawful processing + legal obligation + child consent; (5) RIGHT TO RESTRICT PROCESSING (Art. 25) - limiting processing during accuracy dispute + pending objection + unlawful processing + retention for legal claims; (6) RIGHT TO DATA PORTABILITY (Art. 26 - 2023 NEW) - receive personal data provided + structured + commonly-used + machine-readable + transmit to another controller; (7) RIGHT TO OBJECT (Art. 26 - 2023 NEW) - objection to processing based on legitimate interests + public-interest + direct marketing (unconditional) + research; (8) RIGHTS RELATED TO AUTOMATED DECISION-MAKING (Art. 26 - 2023 NEW) - not subject to decision based solely on automated processing with legal or similar effects + with limited exceptions (consent + contract + legal authority) + human review + meaningful information. RESPONSE: 30 calendar days (extendable by 60 days for complex requests); first copy free + reasonable fee subsequent. IDENTITY VERIFICATION required. APPEALS to PDPS + Court.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.