Provide and operate channels for data subjects to exercise statutory rights under Sections 30-43. Right of access (Section 30) within 21 days extendable + prescribed fee not exceeding RM10. Right of correction (Section 34) free of charge for inaccurate incomplete misleading data. Right to withdraw consent (Section 38) in writing with implications notified. Right to prevent processing causing damage or distress (Section 42). Right to prevent direct marketing (Section 43) free of charge unconditional opt out. NEW under 2024 Amendment - Right to data portability (Section 43A new) covering structured commonly-used machine-readable transfer to another controller where technically feasible. Limited automated decision-making rights. Public registers exception (Section 31). Refusal grounds (Section 32) including disproportionate effort + legal privilege + national security. Complaint to PDPC (Section 104) free of charge appeal mechanism.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.