Liechtenstein DSG Articles 15-22 Data Subject Rights (transposing GDPR Articles 15-22): Article 15 Right of Access (Auskunftsrecht) - to obtain confirmation of processing + access to personal data + supplementary information + 30-day standard response + 60-day extension for complex requests + free first request. Article 16 Right to Rectification (Berichtigungsrecht) - to correct inaccurate + incomplete + outdated data + propagation to recipients. Article 17 Right to Erasure (Recht auf Loschung / Right to be Forgotten) - to delete personal data when no longer necessary + consent withdrawn + unlawful processing + legal obligation. Article 18 Right to Restriction (Recht auf Einschrankung). Article 19 Notification Obligation - controller communicates rectification/erasure/restriction to recipients. Article 20 Right to Data Portability (Recht auf Datenubertragbarkeit) - structured + commonly-used + machine-readable format. Article 21 Right to Object (Widerspruchsrecht) - to processing on legitimate grounds + absolute right to object to direct marketing. Article 22 Right not to be subject to Automated Decision-Making (Recht auf nicht ausschliessliche automatisierte Entscheidung) + Profiling + right to human intervention + right to express viewpoint + right to contest. Liechtenstein DSG additional provisions: Article 23 Restrictions on Rights for national security + defence + public security + criminal investigation + economic interest + financial market supervision (FMA - Liechtenstein Financial Market Authority) + Liechtenstein financial sector confidentiality + asset management + foundation administration confidentiality. Article 24 Refusal of Rights subject to documented reasoning + DSS appeals + judicial review by Liechtenstein Administrative Court + Constitutional Court for constitutional issues.
This control maps to 27 controls across 20 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 27 it maps to, and the evidence behind each claim, over MCP and REST.