III.8.d.ii—Scope of Access Obligation
>Control Description
Access needs to be provided only to the extent that an organization stores the personal information. The Access Principle does not itself create any obligation to retain, maintain, reorganize, or restructure personal information files.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.