Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue AC-21: AC-21 Information sharing

The organisation enables authorized users to check whether a sharing partner's access authorizations match the information's access and use restrictions in defined sharing situations, and uses automated or manual means to help users make sharing and collaboration decisions. The GC discussion notes that an information sharing arrangement sets non-binding terms for disclosing personal information and should record the legislative authority, permissible uses and retention for the recipient. 4 enhancements, including the Canada-specific (400) Information sharing agreement, (401) Information sharing arrangement.