Law / Frameworks / NIST Privacy Framework / Communicate-P

NIST Privacy Framework, Communicate-PCM.AW-P6

Data provenance and lineage are maintained and can be accessed for review or transmission/disclosure.NIST Privacy Framework, version 1.0, January 2020, CM.AW-P6

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .

2
laws
2
jurisdictions
0
with court rulings behind them
1
not yet in force

Related controls in other frameworks the same duties, in at least two laws we track, reach both

A law in force is unmarked; the rest wear their state: not yet in force

Data subject rights

1 law, 1 jurisdiction
JurisdictionLawWhat it asks, as read here
European Union European Health Data Space Regulation, Rights of Natural Persons in the Primary Use of Electronic Health Data (Articles 3 to 10) from , in 2.4 years

Let a natural person, or their representative, insert information in their own EHR through the electronic health data access services or applications linked to them, keep that information clearly distinguishable as inserted by the natural person or the representative, and do not let them directly alter electronic health data and related information inserted by health professionals (Article 5).

Sensitive categories

1 law, 1 jurisdiction
JurisdictionLawWhat it asks, as read here
Ontario Consumer Reporting Act, consumer reporting agencies and users of consumer reports

If you deny a benefit or increase a charge wholly or partly because of information from a consumer reporting agency or another person, give the consumer notice when you communicate the action and, if the consumer asks within sixty days, say what the information was and where it came from or give the agency's name and address.

Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.