A customer may confirm whether a controller processes their personal data and access it (unless that would reveal a trade secret); correct inaccuracies and delete data provided by or obtained about them, considering the nature and purposes of the data; obtain a copy of data processed by automated means in a portable and, where technically feasible, readily usable format for transmission to another controller (no trade secrets); and opt out of processing for targeted advertising, the sale of personal data, and profiling in furtherance of solely automated decisions with legal or similarly significant effects. Applies to for-profit entities doing business in Rhode Island or targeting products or services to its residents that in the preceding calendar year controlled or processed personal data of at least 35,000 customers (excluding data processed solely to complete a payment) or of at least 10,000 customers while deriving more than 20 percent of gross revenue from selling personal data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.