The organisation identifies and documents defined uses and disclosures of personal information collections, describes the purposes in privacy notices and policies, restricts uses and disclosures to those compatible with the purpose or permitted by the Privacy Act, and monitors changes in handling so they meet legislative requirements. Canada-specific addition: the personal information bank is updated and the Privacy Commissioner and TBS notified of any new use or disclosure. 2 enhancements. Not allocated to the medium-profile baseline.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.