Data Subject Requests for an Explanation

Practice 3.3

Privacy Logo

Summary

The GDPA allows an individual to request and receive a privacy notice regarding personal data they previously furnished to the governmental entity. The privacy notice must describe:

  • all intended purposes and uses of the personal data;
  • the consequences of refusing to provide the personal data;
  • the classes of persons and governmental entities:
    • with whom the governmental entity shares personal data; or
    • to whom the governmental entity sells personal data; and
  • the record series in which the personal data is included.

Maturity Model

See how this practice progresses from non-existent to fully optimized, with suggested steps for moving from one level to the next.

View Maturity Level
Image

Contact Us

Share your feedback questions & concerns here. You may also reach out to us directly at [email protected]

Contact our privacy team