A consumer has the right to confirm whether a controller is processing their personal data and to access that data. The controller must respond within 45 days of receipt of an authenticated request, extendable once by 45 additional days when reasonably necessary.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.