Per Thailand PDPA Chapter 3: data subject rights. Requirements include (a) implement Data Subject Rights Handling including Access + Rectification + Erasure + Restriction + Object to Processing + Data Portability + (b) implement Right to Object + Withdrawal of Consent + (c) implement Automated Decisions and Profiling protections including human review + explanation + objection rights where applicable + (d) implement Accuracy and Up-to-date Data principle ensuring personal data is accurate + complete + (e) maintain mechanism for receiving + verifying + responding to requests within statutory timelines + (f) maintain records of requests + responses + decisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.