The organisation gives individuals notice when collecting their personal information stating the legal authority, the consequences of refusing, rights of access, correction and protection, a warning that system use may be monitored with statements on routine network monitoring, work-related monitoring and special monitoring without notice when misuse is suspected, how the information will be used, the right to complain to the Privacy Commissioner, and the personal information bank reference. The GC discussion recommends plain-language notices reviewed by the privacy official and legal counsel. 2 enhancements. Not allocated to the medium-profile baseline.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.