The organisation documents organisation-wide policies and procedures for reviewing the accuracy, relevance, timeliness and completeness of personal information through its lifecycle, for correcting or deleting inaccurate or outdated information, and for notifying earlier recipients of corrections. Canada-specific additions: collection follows applicable legislation, and changes to the information are documented with their date and sources. The GC discussion recalls Privacy Act subsection 6(2), direct collection, validation before decisions, and giving individuals the chance to correct information before decisions affect them. No enhancements. Deployed organisation-wide in the medium profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.