The data subject may access and rectify personal data collected with consent, or where direct rectification is not technically possible request the controller or controlling and processing entity to rectify it; the controller must rectify the data after obtaining the data subject's consent as soon as possible or as specialised law provides, and where rectification is impossible must notify the data subject within 72 hours of receiving the request; a processor or third party may rectify data only after written consent from the controller and awareness of the data subject's consent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.