The controller must develop internal systems to receive and investigate complaints and requests for data access, omission or correction, and make them available to individuals; and must use appropriate technologies enabling individuals to directly access, review and correct their personal data. The NCGAA Complaints guideline (PDPPL-02050214E) and Individuals' Rights guideline set the handling expectations, including 30 calendar days to respond.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.