Skip to main content
CMDashCybersecurity Maturity Dashboard

Art.19 Notification obligation regarding rectification/erasure

GDPR · 2016/679

The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.

Quoted verbatim from Regulation (EU) 2016/679 (GDPR), consolidated text, which is in the public domain.

No cross-framework mapping is seeded for this control. That is stated rather than filled in: a mapping nobody authored is worse than a gap you can see.

Track Art.19 with evidence behind it

In CMDash this control is a row with an owner, a status, uploaded evidence kept with its full history, and an export an assessor can read.

Art.19 Notification obligation regarding rectification/erasure — GDPR | CMDash