CCI-003543

The organization responds to complaints, concerns, or questions from individuals about the organizational privacy practices within the organization-defined time period.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to respond to complaints, concerns, or questions from individuals about the organizational privacy practices within 30 days within receipt of the initial complaint. DoD has defined the time period as 30 days within receipt of the initial complaint.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed responds to complaints, concerns, or questions from individuals about the organizational privacy practices within 30 days within receipt of the initial complaint. DoD has defined the time period as 30 days within receipt of the initial complaint.

Compelling Evidence

Supply documentation and reference procedure on how the organization documents and implements a process to respond to complaints, concerns, or questions from individuals about the organizational privacy practices. DoD has defined the time period as 30 days.

The controls below (if any) were marked by NIST as being related to CCI-003543.