{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Data Protection & Privacy","type":"detective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-DATA-14","description":"Record every authorized disclosure of personal information - recipient, date, data categories, and purpose - completely, accurately, and in a timely manner. Upon a verified request, provide the data subject an accounting of the personal information held and its disclosures within the required timeframe.","details":{"control_category":"administrative","control_type":"detective","domain":"Data Protection & Privacy","guidance":[],"members":[{"control_id":"P6.2","coverage":"full","framework":"soc2","relationship":"superset_of"},{"control_id":"P6.7","coverage":"full","framework":"soc2","relationship":"superset_of"}],"statement":"Record every authorized disclosure of personal information - recipient, date, data categories, and purpose - completely, accurately, and in a timely manner. Upon a verified request, provide the data subject an accounting of the personal information held and its disclosures within the required timeframe.","title":"Maintain and provide an accounting of disclosures","unified_id":"UC-DATA-14"},"id":"uc:UC-DATA-14","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-DATA-14","sourceIds":["soc2"],"sourceUrl":null,"title":"UC-DATA-14 — Maintain and provide an accounting of disclosures","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0fc80560685af378c2311919123351d81ec079e3addb8bc6572c8c30c70c7fc8","properties":{},"sourceDetailPath":"/data/v1/records/wf-r7-2fc6568b.json","sourceId":"wf:R7","targetDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","targetId":"uc:UC-DATA-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:14df7f309c1daa3fdcb4e8d284a78ac6ca468f4ed343e91440ad5e170cfe6324","properties":{"rationale":"Providing subjects a complete accounting of PII held and its disclosures gives them knowledge of where data went, countering informational asymmetry.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","sourceId":"uc:UC-DATA-14","targetDetailPath":"/data/v1/records/risk-privacy-power-imbalance-self-determination-9112ad1d.json","targetId":"risk:privacy-power-imbalance-self-determination","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3ad8409d622936a6e22d988071cb26870f667401572e194c443f2e7f32176cc6","properties":{"rationale":"A complete, accurate disclosure register enables detection of disclosures to unentitled parties.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","sourceId":"uc:UC-DATA-14","targetDetailPath":"/data/v1/records/risk-data-breach-unauthorized-disclosure-3b1c296c.json","targetId":"risk:data-breach-unauthorized-disclosure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:59cb8eee6c51c8bfc1cd336279261c7084ca9c9faac5b6c65695e677b3b5720c","properties":{},"sourceDetailPath":"/data/v1/records/wf-d22-f1c724b8.json","sourceId":"wf:D22","targetDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","targetId":"uc:UC-DATA-14","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6d036dc3305a30e1a0a01f3296bb7837110d2df6611f9aec0cfde4e812fd9d5d","properties":{"control_id":"P6.2","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","sourceId":"uc:UC-DATA-14","targetDetailPath":"/data/v1/records/ctrl-soc2-p6-2-236ddbcd.json","targetId":"ctrl:soc2:P6.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:70515f795985aee87a5da0eb6eb7b38a14069232f016e427308beefb398a70f7","properties":{"control_id":"P6.7","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","sourceId":"uc:UC-DATA-14","targetDetailPath":"/data/v1/records/ctrl-soc2-p6-7-64ae9998.json","targetId":"ctrl:soc2:P6.7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:74b60b0522af619e0dfe45df700b919f5d141c72346f71ae5c412129875a17bb","properties":{"rationale":"Providing accountings on verified request fulfills a data-subject right, supporting compliance.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","sourceId":"uc:UC-DATA-14","targetDetailPath":"/data/v1/records/risk-data-privacy-program-noncompliance-ec6178fa.json","targetId":"risk:data-privacy-program-noncompliance","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7bc4fe3700c246060090898e1c975ec1dca9ff55563fc601e501536f43d7c4ba","properties":{"rationale":"Recording every disclosure's recipient, categories, and purpose builds a partial authoritative record of outbound data flows.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-14-2c0be84c.json","sourceId":"uc:UC-DATA-14","targetDetailPath":"/data/v1/records/risk-data-inventory-flows-unmapped-fd7746f8.json","targetId":"risk:data-inventory-flows-unmapped","type":"mitigates"}],"schemaVersion":1}