A controller shall respond to a consumer request within 45 days after receipt, may extend by 45 additional days where reasonably necessary with notice including the reason, and may charge a reasonable fee or refuse to act on a manifestly unfounded, excessive, or repetitive request, with the controller bearing the burden of demonstrating manifestly unfounded or excessive nature. Notably, UCPA does not require a consumer appeals process (unlike VCDPA, CPA, CTDPA).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.