This is the one I think is most relevant to UMA: https://iapp.org/news/a/top-10-operational-impacts-of-the-gdpr-part-6-rtbf-and-data-portability/
I propose that a combination of #wideeco and #shoebox features would support most, maybe all of the requirements.
There are a number of very interesting things for us to consider. For example, the distinction they make around whether the data is processed under consent or not. I might interpret that as any (narrow ecosystem) process that gives the subject some control over her data automatically triggers a number of rights and corresponding duties that would be associated with a wide ecosystem or subject-controlled AS.
Adrian
--