| 💼 P5.1 The entity grants identified and authenticated data subjects the ability to access their stored personal information for review and, upon request, provides physical or electronic copies of that information to data subjects to meet the entity's objectives related to privacy. | 5 | | | |
| 💼 P5.1-1 Responds to Data Controller Requests | | | | |
| 💼 P5.1-2 Authenticates Data Subjects' Identity | | | | |
| 💼 P5.1-3 Permits Data Subjects Access to Their Personal Information | | | | |
| 💼 P5.1-4 Provides Understandable Personal Information Within Reasonable Time | | | | |
| 💼 P5.1-5 Informs Data Subjects If Access Is Denied | | | | |
| 💼 P5.2 The entity corrects, amends, or appends personal information based on information provided by data subjects and communicates such information to third parties, as committed or required, to meet the entity's objectives related to privacy. | 4 | | | |
| 💼 P5.2-1 Responds to Data Controller Requests | | | | |
| 💼 P5.2-2 Communicates Denial of Access Requests | | | | |
| 💼 P5.2-3 Permits Data Subjects to Update or Correct Personal Information | | | | |
| 💼 P5.2-4 Communicates Denial of Correction Requests | | | | |