Honour data subject rights per GDPR Articles 12-22 supplemented by UAVG provisions on: right of access (Art 15 + UAVG Article 35), rectification (Art 16), erasure right to be forgotten (Art 17), restriction (Art 18), portability (Art 20), objection (Art 21), and rights related to automated decision-making (Art 22). Respond within one month (extendable by two months for complex requests). Appoint Data Protection Officer (DPO/FG Functionaris voor Gegevensbescherming) where required per GDPR Article 37 + UAVG Article 36 supplements. Notify AP of DPO appointment via online portal.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.