Key Input of Notice Requirements:
...
- they change the collection and processing of PII which causes additional or higher impact on the PII principal than previously indicated;
- there is a substantial change at the PII controller;
- they change the PII being collected;
- they change the processing of PII;
- they change the collection method of PII;
- they change the purpose of use of collected PII to something outside the scope of what was notified to the PII principal at the time PII was collected;
- they change matters related to the provision of PII to a third party;
- they change the retention period or change the disposal date notified to the PII principal at the time PII was collected;
- they change matters related to disclosure, use and retention period, correction, deletion, third party transfer, or revoking of consent;
- they change the contact information for inquiry.
Note The organization can publish the new contact information on its websites or at the startup page of a mobile app.
ISO/IEC 1st CD 29184
538 Editor's note: Should we have a paragraph on the cases where general publication notice only without
provide notice of the change and
542 seek the PII principal’s consent to those changes include, but are not limited to:
...