unified
UC-DATA-14 — Maintain and provide an accounting of disclosures
Record every authorized disclosure of personal information - recipient, date, data categories, and purpose - completely, accurately, and in a timely manner. Upon a verified request, provide the data subject an accounting of the personal information held and its disclosures within the required timeframe.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- domain
- Data Protection & Privacy
- type
- detective
- category
- administrative
Details
- unified_id
- UC-DATA-14
- title
- Maintain and provide an accounting of disclosures
- statement
- Record every authorized disclosure of personal information - recipient, date, data categories, and purpose - completely, accurately, and in a timely manner. Upon a verified request, provide the data subject an accounting of the personal information held and its disclosures within the required timeframe.
- domain
- Data Protection & Privacy
- control_type
- detective
- control_category
- administrative
- members
- framework
- soc2
- control_id
- P6.2
- coverage
- full
- relationship
- superset_of
- framework
- soc2
- control_id
- P6.7
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- DSAR Fulfillment (Access & Deletion Requests) operates UC-DATA-14 — Maintain and provide an accounting of disclosures
- UC-DATA-14 — Maintain and provide an accounting of disclosures mitigates Power imbalance and loss of self-determination over personal data
- strength
- primary
- rationale
- Providing subjects a complete accounting of PII held and its disclosures gives them knowledge of where data went, countering informational asymmetry.
- UC-DATA-14 — Maintain and provide an accounting of disclosures mitigates Unauthorized disclosure / breach of sensitive information
- strength
- related
- rationale
- A complete, accurate disclosure register enables detection of disclosures to unentitled parties.
- SOC 2 Privacy Criteria Assessment tests UC-DATA-14 — Maintain and provide an accounting of disclosures
- UC-DATA-14 — Maintain and provide an accounting of disclosures maps_to P6.2 — The entity creates and retains a complete, accurate, and timely record of authorized disclosures of personal information to meet the entity's objectives related to privacy.
- framework
- soc2
- control_id
- P6.2
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-14 — Maintain and provide an accounting of disclosures maps_to P6.7 — The entity provides data subjects with an accounting of the personal information held and disclosure of the data subjects' personal information, upon the data subjects' request, to meet the entity's objectives related to privacy.
- framework
- soc2
- control_id
- P6.7
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-14 — Maintain and provide an accounting of disclosures mitigates Privacy-program non-compliance (GDPR, CCPA, state laws)
- strength
- related
- rationale
- Providing accountings on verified request fulfills a data-subject right, supporting compliance.
- UC-DATA-14 — Maintain and provide an accounting of disclosures mitigates Undocumented data inventory and unmapped data flows
- strength
- related
- rationale
- Recording every disclosure's recipient, categories, and purpose builds a partial authoritative record of outbound data flows.