Confirmation of processing or access must be provided on request either immediately in simplified form, or within 15 days of the request by a clear and complete statement indicating the origin of the data, the absence of records, the criteria used and the purpose of processing, respecting commercial and industrial secrets. Data must be stored in a format that favours access; information may be provided electronically (securely and suitably) or in print, at the data subject's choice. Where processing rests on consent or contract, the data subject may request a complete electronic copy of their data in a format allowing later use, including in other processing operations, under ANPD regulation. The ANPD may set different deadlines for specific sectors; small processing agents get double time for the full statement and may give the simplified statement within 15 days.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.