Provide statutory consumer rights under MCA 30-14-2807. (1) Right to confirm processing + access personal data; (2) Right to correct inaccuracies; (3) Right to delete personal data provided by or about consumer; (4) Right to data portability in structured commonly-used machine-readable format where processed automatically; (5) Right to opt out of (a) targeted advertising (b) sale of personal data (c) profiling in furtherance of decisions producing legal or similarly significant effects; (6) Right to appeal denied requests with AG complaint referral within reasonable time. Response within 45 days extendable once for an additional 45 days for complex requests with notice + free of charge first request per 12-month period + authentication of consumer identity without creating new account + authorised agent permitted including via Universal Opt-Out Mechanism + appeal process with denial reason and AG referral evidence. Refusal grounds limited (manifestly unfounded + excessive + impossible). Sale exception for transactions where personal data is asset transferred as part of merger or acquisition or bankruptcy of controller.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.