From the course: Certified Information Privacy Manager (CIPM) Cert Prep: 6 Privacy Operational Life Cycle: Respond

Unlock this course with a free trial

Join today to access over 23,200 courses taught by industry experts.

Access and the right to be informed

Access and the right to be informed

the purpose of the processing, the categories of the personal information involved, any third parties with whom the controller shares that personal information, the source of the information if it wasn't collected directly from the data subject, the period of time for which the information will be stored, or the criteria used to determine that period, and whether any automated decision-making processes are being used on that data. Data subjects must also be informed of the right to request correction or erasure of personal information, and the right to lodge a complaint with a supervisory authority. In cases where the data controller is transferring personal information to a third country or to an international organization, the data subject has the right to be informed of the safeguards used to protect that transfer. And finally, the core right of access. Upon request, data controllers must provide data subjects with a…

Contents