The entity creates and retains a complete, accurate, and timely record of authorized disclosures of personal information to meet the entity’s objectives related to privacy.
Points of focus:
- Creates and Retains Record of Authorized Disclosures
The organization should save information concerning personal data disclosures to third parties. The information should include what personal data has been disclosed, to whom and when.