Per Portugal law + GDPR Articles 12-23: data subject rights. Requirements include (a) implement Data Subject Rights Handling including Access + Rectification + Erasure + Restriction + Object + Data Portability per GDPR + (b) implement Information Obligation in Portuguese including privacy notices in national language per CNPD (Comissao Nacional de Proteccao de Dados) guidance + (c) maintain mechanism for receiving + verifying + responding within statutory timelines (typically 30 days extendable) + (d) maintain records of requests + responses + decisions + (e) integrate with broader privacy programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.