Articles 14 to 18: a rectification request states the data and correction with supporting documents where needed; erasure follows GDPR 17, and where it follows an objection to direct marketing the controller may keep identifying data needed to prevent future marketing; restriction under GDPR 18 must be clearly recorded in the controller's information systems; portability, objection and automated decisions follow GDPR 20 to 22.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.