The controller must establish a clearly and conspicuously available process for a customer to appeal a refusal to act, within a reasonable time after receiving the decision, and must tell the customer in writing within sixty days of receiving the appeal what action it took or did not take with a written explanation; if the appeal is denied the customer may complain to the Attorney General. Applies to for-profit entities doing business in Rhode Island or targeting products or services to its residents that in the preceding calendar year controlled or processed personal data of at least 35,000 customers (excluding data processed solely to complete a payment) or of at least 10,000 customers while deriving more than 20 percent of gross revenue from selling personal data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.