Honor consumer rights per Oregon OCPA per ORS 646A.574. Rights include (a) right of access including obtaining list of specific third parties to which the controller has disclosed personal data per the consumer or any consumer (Oregon-unique provision distinguishing OCPA from other state laws), (b) right to correction of inaccurate personal data, (c) right to deletion of personal data, (d) right to portability of personal data in a readily usable format, (e) right to opt out of sale of personal data + targeted advertising + profiling in furtherance of decisions producing legal or similarly significant effects on the consumer. Authorised agent requests must be honored where consumer authorises agent in writing or via permitted technical means. Rights handling must (a) verify consumer identity using commercially reasonable methods + (b) respond within 45 days extendable + (c) provide twice yearly free of charge + (d) provide accessible methods for submission. Appeal of rights decision must (a) allow consumer to appeal denied request + (b) respond within 45 days + (c) provide reasoning + (d) inform of right to contact Attorney General.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.