Controllers must respond to consumer requests within 45 days of receipt. The period may be extended once by 45 additional days when reasonably necessary with notice to the consumer. Information must be provided free of charge up to twice annually. Controllers must use commercially reasonable efforts to authenticate the request.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.