Kuwait KDPPR Article 3 Data Subject Rights (modeled on GDPR Articles 12-22 + GCC convergence): (1) Right to Information about processing including identity of Controller + Processor + purposes + lawful basis + recipients + retention; (2) Right of Access to own Personal Data + free first copy + reasonable subsequent fee; (3) Right to Correction of inaccurate or incomplete data; (4) Right to Erasure (Right to be Forgotten) when no longer necessary + consent withdrawn + unlawful processing + legal obligation; (5) Right to Object to processing including direct marketing + profiling; (6) Right to Restriction of Processing during dispute or accuracy verification; (7) Right to Withdrawal of Consent at any time as easily as it was given; (8) Right to Data Portability for data provided by Data Subject in structured machine-readable format. Response within reasonable timeframe (typically 30 days). Free of charge for first request. Complaints to CITRA Data Privacy Office.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.