Subjects have rights of access, rectification, erasure, restriction, portability, objection, and rights related to automated decision making, with responses required within 30 days extendable by 60 days for complex requests.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.