On request by a data subject proving identity, the controller must update, rectify, erase or block data whose processing does not comply with the Law, particularly because it is incomplete or inaccurate, free of charge and within ten clear days. If it refuses or does not answer, the data subject may apply to the CNDP, which has a member investigate and have the rectification made. Where the ten days cannot be met, the controller gives a dated, signed acknowledgement with the reason and refers the matter immediately to the CNDP to fix a deadline, and it informs the person in writing of the action taken (Decree Articles 36(3) and 41). Heirs may request updating of a deceased person's data on proof of their status (Decree Article 42). Refusing rectification is an offence (Article 53).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.