{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Governance, Policy & Oversight","type":"corrective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-GOV-27","description":"Implement a process to receive, track, and resolve privacy-related complaints, concerns, and questions from individuals within defined response times, including escalation paths and feedback to complainants. Maintain an accurate accounting of disclosures of personal information — including date, nature, purpose, and recipient — retained for the required period and made available to the individuals concerned upon request.","details":{"control_category":"administrative","control_type":"corrective","domain":"Governance, Policy & Oversight","guidance":[],"members":[{"control_id":"PM-21","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"PM-26","coverage":"full","framework":"nist-800-53","relationship":"superset_of"}],"statement":"Implement a process to receive, track, and resolve privacy-related complaints, concerns, and questions from individuals within defined response times, including escalation paths and feedback to complainants. Maintain an accurate accounting of disclosures of personal information — including date, nature, purpose, and recipient — retained for the required period and made available to the individuals concerned upon request.","title":"Manage privacy complaints and account for disclosures","unified_id":"UC-GOV-27"},"id":"uc:UC-GOV-27","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-GOV-27","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"UC-GOV-27 — Manage privacy complaints and account for disclosures","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1748a9d583be39a13e548b9021a60983c28574142bef801016d8dfac96f8396b","properties":{"control_id":"PM-26","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-27-a70f09a0.json","sourceId":"uc:UC-GOV-27","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pm-26-ec95caa6.json","targetId":"ctrl:nist-800-53:PM-26","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:19df976fd50d8d8f0e75c8b6bec8e72fbb082fc3316bdbcb966ec4e1f90645a5","properties":{"rationale":"Tracking and resolving privacy complaints and accounting for disclosures satisfies data-subject rights, reducing regulatory escalation.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-27-a70f09a0.json","sourceId":"uc:UC-GOV-27","targetDetailPath":"/data/v1/records/risk-compliance-litigation-enforcement-25e7935d.json","targetId":"risk:compliance-litigation-enforcement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8959d1dc4daf608aa97cbf95e033ae42c3fdeaba8e7be68f5ccfebb0221b4cdd","properties":{"rationale":"Responsive complaint resolution and disclosure transparency preserve individual trust.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-27-a70f09a0.json","sourceId":"uc:UC-GOV-27","targetDetailPath":"/data/v1/records/risk-reputational-stakeholder-trust-23d21e70.json","targetId":"risk:reputational-stakeholder-trust","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8f9c3864ad5fe862f49d3451f03c9653832b9e374f4b0162eb7f341018249cb3","properties":{"control_id":"PM-21","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-27-a70f09a0.json","sourceId":"uc:UC-GOV-27","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pm-21-34602647.json","targetId":"ctrl:nist-800-53:PM-21","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:92e0dcf49118e943b799d1e7b065ec56e26ca2295a4ff1cacbc7952550ce9dbf","properties":{},"sourceDetailPath":"/data/v1/records/wf-r9-636a9e6e.json","sourceId":"wf:R9","targetDetailPath":"/data/v1/records/uc-uc-gov-27-a70f09a0.json","targetId":"uc:UC-GOV-27","type":"operates"}],"schemaVersion":1}