The data subject may request the controller or controlling and processing entity to provide their personal data, which must be provided within 72 hours of the request unless the law provides otherwise; data may be provided to others with the data subject's consent or on the data subject's behalf under a valid representation or authorisation; provision must be refused where it would harm national defence, security or social order, where it may affect the safety or health of others, or where the data subject does not agree; requests are made in person or by an authorised person at the head office, or online, by post or fax on the appendix forms, in Vietnamese with the requester's identity, the data sought, the form of provision and the reasons; the controller must receive requests, monitor the process and keep a list of data provided, redirect requests outside its competence, and on a valid request notify the time limit, place, form, actual costs and payment terms and then provide the data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.