unified
UC-DATA-06 — Provide data subjects access to their personal data
Operate a mechanism for identified and authenticated individuals to obtain confirmation of processing and a copy of their personal data, including the categories collected, sold, shared, or disclosed and the categories of recipients, within statutory deadlines. Where access is denied, inform the individual of the denial, the reason, and any recourse. Log all requests and responses as evidence.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Data Protection & Privacy
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-DATA-06
- title
- Provide data subjects access to their personal data
- statement
- Operate a mechanism for identified and authenticated individuals to obtain confirmation of processing and a copy of their personal data, including the categories collected, sold, shared, or disclosed and the categories of recipients, within statutory deadlines. Where access is denied, inform the individual of the denial, the reason, and any recourse. Log all requests and responses as evidence.
- domain
- Data Protection & Privacy
- control_type
- preventive
- control_category
- administrative
- members
- framework
- soc2
- control_id
- P5.1
- coverage
- full
- relationship
- superset_of
- framework
- hipaa
- control_id
- HIPAA-164.524
- coverage
- full
- relationship
- superset_of
- framework
- ccpa
- control_id
- CCPA-1798.110-115
- coverage
- partial
- delta
- response must also disclose categories of sources and business/commercial purposes
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- DSAR Fulfillment (Access & Deletion Requests) operates UC-DATA-06 — Provide data subjects access to their personal data
- UC-DATA-06 — Provide data subjects access to their personal data maps_to CCPA-1798.110-115 — Rights to access and disclosure of personal information collected, sold, or shared
- framework
- ccpa
- control_id
- CCPA-1798.110-115
- coverage
- partial
- delta
- response must also disclose categories of sources and business/commercial purposes
- relationship
- intersects_with
- source_version
- CCPA (2018) as amended by CPRA (2020)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- SOC 2 Privacy Criteria Assessment tests UC-DATA-06 — Provide data subjects access to their personal data
- UC-DATA-06 — Provide data subjects access to their personal data mitigates Excessive surveillance, appropriation and induced disclosure
- strength
- related
- rationale
- UC-DATA-06 — Provide data subjects access to their personal data maps_to P5.1 — The entity grants identified and authenticated data subjects the ability to access their stored personal information for review and, upon request, provides physical or electronic copies of that information to data subjects to meet the entity's objectives related to privacy. If access is denied, data subjects are informed of the denial and reason for such denial, as required, to meet the entity's objectives related to privacy.
- framework
- soc2
- control_id
- P5.1
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-06 — Provide data subjects access to their personal data mitigates Privacy-program non-compliance (GDPR, CCPA, state laws)
- strength
- related
- rationale
- Fulfilling access requests within statutory deadlines addresses the failure-to-honor-DSR driver of non-compliance.
- UC-DATA-06 — Provide data subjects access to their personal data maps_to HIPAA-164.524 — Individual right of access to PHI
- framework
- hipaa
- control_id
- HIPAA-164.524
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 45 CFR Parts 160/164 (Security, Privacy, Breach Notification)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-06 — Provide data subjects access to their personal data mitigates Power imbalance and loss of self-determination over personal data
- strength
- primary
- rationale
- Giving individuals confirmation and a copy of their data plus recipient/category detail directly restores knowledge and control over their own data.