Back

Notify third parties of unresolved challenges.


CONTROL ID
13559
CONTROL TYPE
Communicate
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a privacy dispute resolution program., CC ID: 12526

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • in such a way that that data cannot be used by a person (including the data user and a third party) without the note being drawn to the attention of, and being available for inspection by, that person; and (Amended 18 of 2012 s. 2) ( (Part 5 Division 2 Section 25(2)(b)(i)(B), Hong Kong Personal Data (Privacy) Ordinance, E.R. 1 of 2013)
  • the first-mentioned data user shall immediately transfer the data correction request to such data user, and notify the requestor of this fact; and (Part II Division 4 35. (5) (a), Personal Data Protection Act 2010, Act 709, As at 15 June 2016)
  • the entity must take such steps as are reasonable in the circumstances to associate the statement in such a way that will make the statement apparent to users of the information. (Schedule 1 Part 5 Clause 13 Subclause 13.4 ¶ 2, Australian Privacy Act 1988, Compilation No. 77)
  • When a challenge is not resolved to the satisfaction of the individual, the substance of the unresolved challenge shall be recorded by the organization. When appropriate, the existence of the unresolved challenge shall be transmitted to third parties having access to the information in question. (Schedule 1 4.9.6, Canada Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5, Last amended on June 23, 2015)
  • When a subsequent disclosure described in paragraph (d)(5)(i) or (ii) of this section is made using a standard transaction under part 162 of this subchapter that does not permit the additional material to be included with the disclosure, the covered entity may separately transmit the material requir… (§ 164.526(d)(5)(iii), 45 CFR Part 164 - Security and Privacy, current as of July 6, 2020)