Under active development Content is continuously updated and improved

PRI-06Data Subject Empowerment

Weight: 6

>Control Description

Mechanisms exist to provide authenticated data subjects the ability to: (1) Access their Personal Data (PD) that is being processed, stored and shared, except where the burden, risk or expense of providing access would be disproportionate to the benefit offered to the data subject through granting access; (2) Obtain answers on the specifics of how their PD is collected, received, processed, stored, transmitted, shared, updated and/or disposed; (3) Obtain the source(s) of their PD; (4) Obtain the categories of their PD being collected, received, processed, stored and shared; (5) Request correction to their PD due to inaccuracies; (6) Request erasure of their PD; and (7) Restrict the further collecting, receiving, processing, storing, transmitting, updated and/or sharing of their PD.

>Cross-Framework Mappings

APEC Privacy Framework

OECD Privacy Principles

Data Privacy Management Principles

Ask AI

Configure your API key to use AI features.