5. of Transfer
We export a database dump by writing a CSV file on an FTP site. What happens to the file after it has been downloaded is not our problem.
|
Threat |
|
|
|
You’re allowing third parties to download a dump of your database and have no record of who downloaded the data and no contract in place stipulating the third parties’ obligations regarding the treatment of the data. The data is your responsibility for as long as you are the owner or controller. If you grant someone access to take a copy of that data, it is still your responsibility, and if a subject then asks for their data to be removed, you must approach anyone you have given a copy to and ask them to remove the data as well. |
|
GDPR |
Chapter 4, Art. 24 |
|
CCPA & CPRA |
CCPA 1798.100. General Duties... |
