Requirement

Data transfer and disclosure

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Fulfill this requirement by completing the tasks below ->
Data transfer and disclosure
This requirement is part of the framework:  

Other requirements of the framework

No items found.
0
Data transfer and disclosure
No items found.
Privacy
Best practices
How to implement:
Data transfer and disclosure
This policy on
Data transfer and disclosure
provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.
Read below what concrete actions you can take to improve this ->
Privacy
Data transfer and disclosure
Frameworks that include requirements for this topic:
Lov om digital sikkerhet (Norge)
CRA (Cyber Resilience Act)
CIS 18 controls
Public administration information management act
TISAX: Information security
Tietoturvasuunnitelma (THL 3/2024)

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
Data transfer and disclosure
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
Opt out mechanism for internal activity recording
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Opt out mechanism for internal activity recording

This task helps you comply with the following requirements

Article 13.1(.2.l): Providing security‐related informationCRA
First request and subsequent requests
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

First request and subsequent requests

This task helps you comply with the following requirements

No items found.
Reporting of PHI to supervisory authorities
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Reporting of PHI to supervisory authorities

This task helps you comply with the following requirements

No items found.
Use and disclosure of de-identified PHI
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Use and disclosure of de-identified PHI

This task helps you comply with the following requirements

No items found.
Health oversight cooperation
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Health oversight cooperation

This task helps you comply with the following requirements

No items found.
Disclosure of PHI for research purposes
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Disclosure of PHI for research purposes

This task helps you comply with the following requirements

No items found.
PHI de-identification requirements
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

PHI de-identification requirements

This task helps you comply with the following requirements

No items found.
Threat prevention disclosures of PHI
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Threat prevention disclosures of PHI

This task helps you comply with the following requirements

No items found.
PHI re-identification controls
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

PHI re-identification controls

This task helps you comply with the following requirements

No items found.
Defining permitted uses and disclosures of PHI
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Defining permitted uses and disclosures of PHI

This task helps you comply with the following requirements

No items found.
Disclosure of PHI related to abuse and neglect
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Disclosure of PHI related to abuse and neglect

This task helps you comply with the following requirements

No items found.
Minimizing the use and disclosure of protected health information
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Minimizing the use and disclosure of protected health information

This task helps you comply with the following requirements

No items found.
Manage permitted uses, consent, and disclosures of PHI
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Manage permitted uses, consent, and disclosures of PHI

This task helps you comply with the following requirements

No items found.
Process request and provide accounting
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Process request and provide accounting

This task helps you comply with the following requirements

No items found.
Disclosure of PHI to public health authorities
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Disclosure of PHI to public health authorities

This task helps you comply with the following requirements

No items found.
Disclosures for decedent and organ donation management
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Disclosures for decedent and organ donation management

This task helps you comply with the following requirements

No items found.
Minimum necessary access to PHI
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Minimum necessary access to PHI

This task helps you comply with the following requirements

No items found.
Legal disclosures of PHI
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Legal disclosures of PHI

This task helps you comply with the following requirements

No items found.
Inventory and documentation of data processing agreements
Critical
High
Normal
Low
17
requirements
Privacy
Data transfer and disclosure

Inventory and documentation of data processing agreements

This task helps you comply with the following requirements

28. Data processorGDPR
15.1.2: Addressing security within supplier agreementsISO 27001
13.2.2: Agreements on information transferISO 27001
A.8.2.4: Infringing instructionISO 27701
5.14: Information transferISO 27001
5.20: Addressing information security within supplier agreementsISO 27001
57: Henkilötietojen käsittelysopimuksetDigiturvan kokonaiskuvapalvelu
P6.5: Notification of unauthorized disclosure of personal information from third partiesSOC 2
P6.4: Obtaining privacy commitments from third parties and assesment of complianceSOC 2
6.1: Yleiset tietoturvakäytännötTietoturvasuunnitelma
Documentation of bases for personal data transfer for relevant partners
Critical
High
Normal
Low
16
requirements
Privacy
Data transfer and disclosure

Documentation of bases for personal data transfer for relevant partners

This task helps you comply with the following requirements

44. General principle for transfersGDPR
45. Transfers on the basis of an adequacy decisionGDPR
46. Transfers subject to appropriate safeguardsGDPR
47. Binding corporate rulesGDPR
48. Transfers or disclosures not authorised by Union lawGDPR
49. Derogations for specific situationsGDPR
Transfers of personal data to third countries or international organisationsGDPR
A.12.1: Geographical location of PIIISO 27018
A.7.5.1: Identity basis for PII transfer between jursdictionsISO 27701
A.8.5.1: Basis for PII transfer between jurisdictionsISO 27701
Documentation of data disclosures for data stores
Critical
High
Normal
Low
10
requirements
Privacy
Data transfer and disclosure

Documentation of data disclosures for data stores

This task helps you comply with the following requirements

30. Records of processing activitiesGDPR
28. Data processorGDPR
12. Transparent information, communication and modalities for the exercise of the rights of the data subjectGDPR
A.6.2: Recording of PII disclosuresISO 27018
A.7.3.7: PII controllers' obligations to inform third partiesISO 27701
A.7.4.2: Limit processingISO 27701
A.7.5.4: Records of PII disclosure to third partiesISO 27701
P6.1: Disclosure of personal information to third parties with consent of the data subjectsSOC 2
9.5.1: Management of data transferTISAX
3.1: Establish and Maintain a Data Management ProcessCIS 18
Legal bases for personal data transfers between different legal zones
Critical
High
Normal
Low
2
requirements
Privacy
Data transfer and disclosure

Legal bases for personal data transfers between different legal zones

This task helps you comply with the following requirements

A.7.5.1: Identity basis for PII transfer between jursdictionsISO 27701
9.5.3: Management of data transfers to third countriesTISAX
Documenting states and international organizations receiving personal data
Critical
High
Normal
Low
2
requirements
Privacy
Data transfer and disclosure

Documenting states and international organizations receiving personal data

This task helps you comply with the following requirements

A.7.5.2: Countries and international organizations to which PII can be transferredISO 27701
A.8.5.2: Countries and international organizations to which PII can be transferredISO 27701
Records of personal data transfers to third parties
Critical
High
Normal
Low
3
requirements
Privacy
Data transfer and disclosure

Records of personal data transfers to third parties

This task helps you comply with the following requirements

A.7.5.3: Records of transfer of PIIISO 27701
A.8.5.3: Records of PII disclosure to third partiesISO 27701
9.5.3: Management of data transfers to third countriesTISAX
Records of personal data disclosures to third parties
Critical
High
Normal
Low
4
requirements
Privacy
Data transfer and disclosure

Records of personal data disclosures to third parties

This task helps you comply with the following requirements

A.7.5.4: Records of PII disclosure to third partiesISO 27701
HAL-07.1: Seuranta ja valvonta - tietojen käyttö ja luovutuksetJulkri
TEK-12.1: Turvallisuuteen liittyvien tapahtumien jäljitettävyys - tietojen luovutuksetJulkri
P6.2: Record of authorized disclosures of personal informationSOC 2
Rejecting any non-legally binding requests for personal data disclosure
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Rejecting any non-legally binding requests for personal data disclosure

This task helps you comply with the following requirements

A.8.5.5: Legally binding PII disclosuresISO 27701
Readiness to provide a list of data transfers to the data subject
Critical
High
Normal
Low
1
requirements
Privacy
Data transfer and disclosure

Readiness to provide a list of data transfers to the data subject

This task helps you comply with the following requirements

P6.7: Providing an accounting of personal information upon data subjects' requestSOC 2
Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
Data transfer and disclosure
of the framework  
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
No other tasks found.
Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Effortless compliance improvement
Widest framework library in EU
Extensive support

Start your compliance journey

Use in MS Teams or use your browser with Slack integration.
Risk free trial. No credit card required. Stop at any time.

Start free 14-day trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templates
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessments
Resources
AcademyWebinarsBlogHelp articlesVideo coursesContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security