Skip to main content

💼 P5.1 The entity grants identified and authenticated data subjects the ability to access their stored personal information for review and, upon request, provides physical or electronic copies of that information to data subjects to meet the entity's objectives related to privacy.

  • Contextual name: 💼 P5.1 The entity grants identified and authenticated data subjects the ability to access their stored personal information for review and, upon request, provides physical or electronic copies of that information to data subjects to meet the entity's objectives related to privacy.

  • ID: /frameworks/soc-2/p5/01

  • Located in: 💼 P5.0 Privacy Criteria Related to Access

Description​

If access is denied, data subjects are informed of the denial and reason for such denial, as required, to meet the entity's objectives related to privacy.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 P5.1-1 Responds to Data Controller Requests
💼 P5.1-2 Authenticates Data Subjects' Identity
💼 P5.1-3 Permits Data Subjects Access to Their Personal Information
💼 P5.1-4 Provides Understandable Personal Information Within Reasonable Time
💼 P5.1-5 Informs Data Subjects If Access Is Denied