Back

Include the time frames in which privacy rights violation complaints are processed in the privacy dispute resolution program.


CONTROL ID
12529
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a privacy dispute resolution program., CC ID: 12526

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Any organization or individual has the right to complain and report to a department with personal information protection duties about illegal personal information processing. The department that receives such a complaint or report shall handle it in a timely manner in accordance with the law, and no… (Article 65 ¶ 1, Personal Information Protection Law of the People's Republic of China)
  • The Data Fiduciary or Consent Manager shall respond to any grievances referred to in sub-section (1) within such period as may be prescribed from the date of its receipt for all or any class of Data Fiduciaries. (§ 13.(2), Digital Personal Data Protection Act, 2023, August 11, 2023)
  • the timeframe in which Principles-related complaints are processed; and (III.11.d.ii.(5), EU-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)
  • Independent recourse mechanisms must include on their public websites information regarding the Privacy Shield Principles and the services that they provide under the Privacy Shield. This information must include: (1) information on or a link to the Privacy Shield Principles' requirements for indepe… (§ III.11.d.ii., EU-U.S. Privacy Shield Framework Principles)
  • the timeframe in which Principles-related complaints are processed; and (iii.11.d.ii.(5), SWISS-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)
  • the timeframe in which Principles-related complaints are processed; and (III.11.d.ii.(5), UK EXTENSION TO THE EU-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)
  • The covered entity may have only one such extension of time for action on a request for an amendment. (§ 164.526(b)(2)(ii)(B), 45 CFR Part 164 - Security and Privacy, current as of July 6, 2020)