A consumer has the right to confirm whether a controller is processing the consumer's personal data and to access that personal data, except where such confirmation or access would require disclosure of a trade secret. The controller shall respond to an authenticated consumer request within 45 days of receipt, extendable once by an additional 45 days where reasonably necessary with notice to the consumer.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.