III.8.a.iii—Good Faith Efforts to Provide Access
>Control Description
Consistent with the fundamental nature of access, organizations should always make good faith efforts to provide access. For example, where certain information needs to be protected and can be readily separated from other personal information subject to an access request, the organization should redact the protected information and make available the other information. If an organization determines that access should be restricted in any particular instance, it should provide the individual requesting access with an explanation of why it has made that determination and a contact point for any further inquiries.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.