Include potential remedies in the privacy dispute resolution program.

CONTROL ID
12531

CONTROL TYPE
Establish/Maintain Documentation

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Establish, implement, and maintain a privacy dispute resolution program., CC ID: 12526

There are no implementation support Controls.

An organization shall investigate all complaints. If a complaint is found to be justified, the organization shall take appropriate measures, including, if necessary, amending its policies and practices. (Schedule 1 4.10.4, Canada Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, Last amended on June 23, 2015)
a description of the range of potential remedies. (III.11.d.ii.(6), EU-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)
Independent recourse mechanisms must include on their public websites information regarding the Privacy Shield Principles and the services that they provide under the Privacy Shield. This information must include: (1) information on or a link to the Privacy Shield Principles' requirements for indepe… (§ III.11.d.ii., EU-U.S. Privacy Shield Framework Principles)
a description of the range of potential remedies. (iii.11.d.ii.(6), SWISS-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)
a description of the range of potential remedies. (III.11.d.ii.(6), UK EXTENSION TO THE EU-U.S. DATA PRIVACY FRAMEWORK PRINCIPLES)