Law / Frameworks / NIST Privacy Framework / Communicate-P
NIST Privacy Framework, Communicate-PCM.AW-P8
Individuals are provided with mitigation mechanisms (e.g., credit monitoring, consent withdrawal, data alteration or deletion) to address impacts of problematic data actions.NIST Privacy Framework, version 1.0, January 2020, CM.AW-P8
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Corpus as of .
- 2
- laws
- 2
- places
- 0
- with court rulings behind them
- 1
- not yet in force
The same ground elsewhere linked through the kinds of duty both controls are mapped from
- NIST AI RMFGOVERN 4.3 Organizational practices are in place to enable AI testing, identification of...
- NIST AI RMFMANAGE 4.1 Post-deployment AI system monitoring plans are implemented, including mechanisms for...
- NIST AI 600-1GAI-RISK-04 Data Privacy
- NIST AI 600-1GAI-RISK-09 Information Security
- MIT mitigations3.6 Incident Response & Recovery
- MIT mitigations4.3 Incident Reporting
- NIST CSF 2.0GV.SC-08 Relevant suppliers and other third parties are included in incident planning,...
- NIST CSF 2.0ID.IM-04 Incident response plans and other cybersecurity plans that affect operations are...
A law in force is unmarked; the rest wear their state: not yet in force
Breach notification
1 law, 1 place| Place | Law | What it asks, as read here |
|---|---|---|
 Massachusetts |
Security Breach statute, credit monitoring offer required from a date not yet set |
Offer at least 18 months of free credit monitoring to a Massachusetts resident whose Social Security number was disclosed, or reasonably believed disclosed, in a breach of security. If you are a consumer reporting agency that experienced the breach, offer not less than 42 months of free credit monitoring instead of 18. +1 more |
Device storage and tracking consent
1 law, 1 place| Place | Law | What it asks, as read here |
|---|---|---|
 Canada |
Canada's Anti-Spam Legislation |
For one year after installing a program with one of those functions, give the person who consented an address to request its removal or disabling if they believe the description they were given was inaccurate, and, where it was, help them remove or disable it at no cost, as soon as feasible. |
Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.