A data subject may in the prescribed manner (Form 2) request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully, or destruction or deletion of a record the responsible party is no longer authorised to retain; the responsible party must as soon as reasonably practicable correct, destroy or delete the information, or provide credible evidence supporting it, or, where agreement cannot be reached and the data subject asks, attach an indication that a correction was requested but not made so that it is always read with the information; where a change affects decisions taken or to be taken it must, if reasonably practicable, inform every person or body to whom the information was disclosed; and it must notify the data subject of the action taken.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.