A controller must comply with an authenticated request, including from a parent or guardian for a known child, to confirm processing and access the data, correct inaccuracies, delete data provided by or obtained about the consumer, obtain a portable copy of data the consumer provided where it is held digitally, and opt out of targeted advertising, sale, and profiling that furthers decisions with legal or similarly significant effects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.