Implement consumer rights per the NDPA covering: (a) right to confirm whether the controller is processing personal data + access to that data, (b) right to correct inaccuracies, (c) right to delete personal data provided by or obtained about the consumer, (d) right to obtain a portable copy of personal data, (e) right to opt out of targeted advertising + sale of personal data + profiling. Respond to requests within 45 days (extendable by 45 days with notice). Provide a clear and conspicuous appeal mechanism with response within 60 days. Recognise authorised agents acting on behalf of consumers with reasonable verification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.