South Korea ISMS-P
3.5 Protecting data subject rights – South Korea ISMS-P

South Korea ISMS-P 3.5.2: Guaranteeing data subject rights

What does 3.5.2 require?

Procedures for data subjects or their agents to request access, correction or deletion, suspension of processing and withdrawal of consent are no harder than the collection process and are published; requests are handled within the legal time limit; withdrawal of consent leads to destruction of the data without delay; objection procedures exist for decisions on requests; handling is recorded; and on information networks there is a procedure for requesting deletion of information that infringes others' privacy or reputation, including temporary measures (PIPA Articles 34-2, 35, 35-2, 36, 37, 37-2 and 38; Network Act Articles 44 to 44-3).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 3.5 Protecting data subject rights – South Korea ISMS-P

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.