The controller rectifies inaccurate data and erases data without delay where processing is unlawful, legally required to be erased, or no longer needed; s 58(3) to (5) apply, and recipients are informed of inaccurate or unlawful transmissions. Without prejudice to statutory limits, the controller sets appropriate time limits for erasure or periodic review of the need to store and takes procedural measures to ensure they are observed.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.