unified
UC-DATA-15 — Record and notify unauthorized disclosures of personal data
Log every detected or reported unauthorized disclosure or breach of personal information in a complete, accurate, and timely register. Notify affected data subjects, regulators, and other required parties within the applicable statutory windows, and retain the notifications and supporting analysis as evidence.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- domain
- Data Protection & Privacy
- type
- corrective
- category
- administrative
Details
- unified_id
- UC-DATA-15
- title
- Record and notify unauthorized disclosures of personal data
- statement
- Log every detected or reported unauthorized disclosure or breach of personal information in a complete, accurate, and timely register. Notify affected data subjects, regulators, and other required parties within the applicable statutory windows, and retain the notifications and supporting analysis as evidence.
- domain
- Data Protection & Privacy
- control_type
- corrective
- control_category
- administrative
- members
- framework
- soc2
- control_id
- P6.3
- coverage
- full
- relationship
- superset_of
- framework
- soc2
- control_id
- P6.6
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-DATA-15 — Record and notify unauthorized disclosures of personal data maps_to P6.6 — The entity provides notification of breaches and incidents to affected data subjects, regulators, and others to meet the entity's objectives related to privacy.
- framework
- soc2
- control_id
- P6.6
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-15 — Record and notify unauthorized disclosures of personal data maps_to P6.3 — The entity creates and retains a complete, accurate, and timely record of detected or reported unauthorized disclosures (including breaches) of personal information to meet the entity's objectives related to privacy.
- framework
- soc2
- control_id
- P6.3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- SOC 2 Privacy Criteria Assessment tests UC-DATA-15 — Record and notify unauthorized disclosures of personal data
- Incident Management Lifecycle operates UC-DATA-15 — Record and notify unauthorized disclosures of personal data
- UC-DATA-15 — Record and notify unauthorized disclosures of personal data mitigates Erosion of individual trust and confidence in data practices
- strength
- related
- rationale
- Timely, transparent breach notification limits the trust erosion that follows unauthorized-disclosure incidents.
- UC-DATA-15 — Record and notify unauthorized disclosures of personal data mitigates Unauthorized disclosure / breach of sensitive information
- strength
- related
- rationale
- Logging and analyzing unauthorized disclosures is the corrective response that limits their harm and recurrence.
- UC-DATA-15 — Record and notify unauthorized disclosures of personal data mitigates Failure to detect, assess, and notify breaches on time
- strength
- primary
- rationale
- Notifying affected subjects, regulators, and other parties within statutory windows directly counters failure to notify breaches on time.
- Privacy Breach Assessment & Notification operates UC-DATA-15 — Record and notify unauthorized disclosures of personal data