Honour PII data subject rights including: right of access + rectification + erasure/correction + portability + restriction of processing + objection + automated decision-making protections per Privacy Act 1974 access and amendment + state privacy laws + GDPR equivalence where applicable. Apply Section 4 rights with response timelines (30 days under Privacy Act + 45 days under most state privacy laws). Document Automated Decision-Making (ADM) involving PII with human review + safeguards + right to object.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.