Access, export, rectification and deletion-request workflows are built in. Final legal wording requires launch review.