{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"privacy","domain":["Data Protection & Privacy","Awareness & Training"],"inherent_rating":"medium","taxonomy":["nist-privacy-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aprivacy-loss-of-trust","description":"Systemic failure to meet reasonable privacy expectations undermines confidence in products and institutions, causing disengagement, reputational damage, and reduced adoption — an organizational as well as individual harm.","details":{"category":"privacy","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"privacy-loss-of-trust","taxonomies":["nist-privacy-risk"],"treatment":"mitigate"},"id":"risk:privacy-loss-of-trust","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aprivacy-loss-of-trust","sourceIds":["ccpa","gdpr","hipaa","nist-800-53","soc2","sox"],"sourceUrl":null,"title":"Erosion of individual trust and confidence in data practices","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5c899053b65f78203702252309d82444c163da424066c60f71a17ae948f78edb","properties":{"rationale":"Channels for internal/external parties to raise concerns, routed to those who act, provide responsiveness and redress that mitigates erosion of trust.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-train-04-48d1a2b1.json","sourceId":"uc:UC-TRAIN-04","targetDetailPath":"/data/v1/records/risk-privacy-loss-of-trust-a4d1142c.json","targetId":"risk:privacy-loss-of-trust","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:797932c738f5104f8f4a01aeb7695575ad4d9d28a420458b926f15caabec88ef","properties":{"rationale":"Transparent, current notices meet reasonable privacy expectations, sustaining confidence in data practices.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-05-3244ac25.json","sourceId":"uc:UC-DATA-05","targetDetailPath":"/data/v1/records/risk-privacy-loss-of-trust-a4d1142c.json","targetId":"risk:privacy-loss-of-trust","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:90f86e0af1b45673ba770dc0acf840aa24d7807a85e01746bbe55c2acb76225f","properties":{"rationale":"Receiving, resolving, and communicating outcomes on privacy complaints, and fixing systemic issues, directly repairs and sustains individual trust.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-17-e1b78e4e.json","sourceId":"uc:UC-DATA-17","targetDetailPath":"/data/v1/records/risk-privacy-loss-of-trust-a4d1142c.json","targetId":"risk:privacy-loss-of-trust","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:956db7084d9ca06ed850a74552e9b90ac34fb45903baf336da89ef4c617fa5e4","properties":{"rationale":"Timely, transparent breach notification limits the trust erosion that follows unauthorized-disclosure incidents.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","sourceId":"uc:UC-DATA-15","targetDetailPath":"/data/v1/records/risk-privacy-loss-of-trust-a4d1142c.json","targetId":"risk:privacy-loss-of-trust","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ad33ac7214bf5abb5e5dd0089a9c14fc9612faa45a4d37273341850d8bc9bbee","properties":{"rationale":"Honoring consent choices and opt-outs meets privacy expectations, sustaining individual trust.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-02-56e3d60a.json","sourceId":"uc:UC-DATA-02","targetDetailPath":"/data/v1/records/risk-privacy-loss-of-trust-a4d1142c.json","targetId":"risk:privacy-loss-of-trust","type":"mitigates"}],"schemaVersion":1}