Brazil LGPD Article 18 Data Subject Rights (Direitos do Titular) - 9 enumerated rights (BRAZIL-SPECIFIC LIST): (I) Confirmation of Existence of Processing (Confirmacao da existencia de tratamento) - to know if data is being processed; (II) Right of Access (Acesso) - obtain personal data + purposes + categories + recipients; (III) Correction of Incomplete + Inaccurate + Outdated Data (Correcao); (IV) Anonymization + Blocking + Deletion of unnecessary + excessive data + data processed in non-compliance with LGPD; (V) Right to Data Portability (Portabilidade) - to another service or product provider; (VI) Deletion of Personal Data processed with consent except as authorised by law; (VII) Information about Sharing (Informacao sobre Compartilhamento) - public + private bodies with which data have been shared; (VIII) Information about Non-Consent Possibility and Consequences (when consent is lawful basis); (IX) Revocation of Consent (Revogacao do Consentimento) - explicit right + as easily as given. Article 19 Response by controller within 15 days standard or 25 days for complex requests + free first request + reasonable subsequent fee + identity verification. Article 20 Right to Review of Automated Decisions (Direito de Revisao de Decisoes Automatizadas) - solely automated decisions including profiling affecting interests of data subject including credit + consumer + work profile + personality + behaviour + right to human review + explanation of criteria + procedure used + algorithmic transparency. Article 21 Right to Reparation in case of damage + ANPD complaint + judicial review by Federal Court + Habeas Data action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.