Free ebook: NIS2 ready using ISO 27001 best practices
Download ebook

Controls for ensuring the proper recipient of personal data transfer

Critical
High
Normal
Low

When personal data is transmitted through a network, organization should have designed appropriate controls for ensuring that the data reaches its intended destination.

Connected other frameworks and requirements:
A.12.2: Intended destination of PII
ISO 27018
A.7.4.9: PII transmission controls
ISO 27701
A.8.4.3: PII transmission controls
ISO 27701

Process for receiving and handling data subject requests

Critical
High
Normal
Low

Whenever we process personal data, the data subject has certain rights, e.g. gain access to their data and, in certain situations, oppose processing or have their data deleted.

We have planned procedures for handling data subject requests, which may include e.g.:

  • the ways in which the data subject may make a request for information
  • methods to verify the identity of the sender
  • the persons to whom requests for information are forwarded in relation to each register
Connected other frameworks and requirements:
15. Right of access by the data subject
GDPR
16. Right to rectification
GDPR
18. Right to restriction of processing
GDPR
19. Notification obligation regarding rectification or erasure of personal data or restriction of processing
GDPR
21. Right to object
GDPR
No items found.