Records of PII disclosure to third parties

The organization should record disclosures of PII to third parties, including what PII has been disclosed, to whom and at what time. ... - Licensed content not shown -

GDPR (EU)

30.1.d: Article(30)(1)(d): Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. That record shall contain all of the following information: (d) the categories of recipients to whom the personal data have been or will be disclosed including recipients in third countries or international organisations

LGPD (BRA)

Art.37: The controller and processor must record their personal data processing operations performed, especially when based on legitimate interest.

APP (Australian Privacy Principles)

APP.6.5: If personal information is used or disclosed in accordance with APP 6.2(e) a written record of the use or disclosure must be kept (APP 6.5)