Every controller must promote personal data protection within the organisation and designate a person or personal data department to handle data subjects' requests to exercise their rights, and must keep personal data so that the ARCO rights can be exercised without delay; the data subject or legal representative may exercise any ARCO right, and exercising one is not a prerequisite for another.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.