Controllers must update third-party processor agreements to comply with the NDPR; design systems and processes that make data requests and access seamless, let data subjects easily correct or update their data and transfer it to another platform or person at minimal cost; clearly communicate how to object to processing; and set out the procedure for informing data subjects and protecting their rights where automated decisions are made about them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.