{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Data Protection & Privacy","type":"corrective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-DATA-15","description":"Log every detected or reported unauthorized disclosure or breach of personal information in a complete, accurate, and timely register. Notify affected data subjects, regulators, and other required parties within the applicable statutory windows, and retain the notifications and supporting analysis as evidence.","details":{"control_category":"administrative","control_type":"corrective","domain":"Data Protection & Privacy","guidance":[],"members":[{"control_id":"P6.3","coverage":"full","framework":"soc2","relationship":"superset_of"},{"control_id":"P6.6","coverage":"full","framework":"soc2","relationship":"superset_of"}],"statement":"Log every detected or reported unauthorized disclosure or breach of personal information in a complete, accurate, and timely register. Notify affected data subjects, regulators, and other required parties within the applicable statutory windows, and retain the notifications and supporting analysis as evidence.","title":"Record and notify unauthorized disclosures of personal data","unified_id":"UC-DATA-15"},"id":"uc:UC-DATA-15","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-DATA-15","sourceIds":["soc2"],"sourceUrl":null,"title":"UC-DATA-15 — Record and notify unauthorized disclosures of personal data","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:08f013c51805388243d7dabbd1cb646b6d21ffc893505e4c35bff00f3893a9b5","properties":{"control_id":"P6.6","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","sourceId":"uc:UC-DATA-15","targetDetailPath":"/data/v1/records/ctrl-soc2-p6-6-f8a47062.json","targetId":"ctrl:soc2:P6.6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0af45c978ff2ba487fa7a43a0d38a90a0f7d9f94e37f4a73b570cd5053a846b0","properties":{"control_id":"P6.3","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","sourceId":"uc:UC-DATA-15","targetDetailPath":"/data/v1/records/ctrl-soc2-p6-3-ab030008.json","targetId":"ctrl:soc2:P6.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4227665499bf2dad0bffaaaff1db5d6014bda49e76cf1dd9d0c85dc1a6e16871","properties":{},"sourceDetailPath":"/data/v1/records/wf-d22-f1c724b8.json","sourceId":"wf:D22","targetDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","targetId":"uc:UC-DATA-15","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:85d001e92bba7f7b75b75d52d7abddd3d8acab5cf78033e85c8510a3c23e953c","properties":{},"sourceDetailPath":"/data/v1/records/wf-g7-9762f11b.json","sourceId":"wf:G7","targetDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","targetId":"uc:UC-DATA-15","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:956db7084d9ca06ed850a74552e9b90ac34fb45903baf336da89ef4c617fa5e4","properties":{"rationale":"Timely, transparent breach notification limits the trust erosion that follows unauthorized-disclosure incidents.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","sourceId":"uc:UC-DATA-15","targetDetailPath":"/data/v1/records/risk-privacy-loss-of-trust-a4d1142c.json","targetId":"risk:privacy-loss-of-trust","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b901e575179c2da6ed1ff8d7830beb5686674e053f3faefdc696464fb062515a","properties":{"rationale":"Logging and analyzing unauthorized disclosures is the corrective response that limits their harm and recurrence.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","sourceId":"uc:UC-DATA-15","targetDetailPath":"/data/v1/records/risk-data-breach-unauthorized-disclosure-3b1c296c.json","targetId":"risk:data-breach-unauthorized-disclosure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ecf69519de6862ac4c016524174b7effb622285c9a16bc07e923e9f747242f34","properties":{"rationale":"Notifying affected subjects, regulators, and other parties within statutory windows directly counters failure to notify breaches on time.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","sourceId":"uc:UC-DATA-15","targetDetailPath":"/data/v1/records/risk-ir-breach-notification-failure-1f01c218.json","targetId":"risk:ir-breach-notification-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ff537bc4838d7c3c20a6ddb8014c3efb74a119492954c6cfd3b245088e5f3265","properties":{},"sourceDetailPath":"/data/v1/records/wf-r16-5b93e206.json","sourceId":"wf:R16","targetDetailPath":"/data/v1/records/uc-uc-data-15-efb7b99a.json","targetId":"uc:UC-DATA-15","type":"operates"}],"schemaVersion":1}