Skip to main content

Third Party Disclosure Configuration

With the passage of Oregon Consumer Privacy Act and the Minnesota Consumer Data and Privacy Act, businesses in those states must provide consumers with a list of third parties with whom they share consumer data starting July 1st, 2024

Definition of a Third Party

A third party is a natural or legal person, public authority, agency, or body other than the consumer, controller, processor, or an affiliate of the processor or the controller. Vendors with a data processing agreement, such as a third-party SaaS tool, are exempt from third-party disclosure.

EXAMPLES

Public agencies, public authorities, business partners, social media networks, advertising companies (behavioral advertising), and entities during a merger, acquisition, or insolvency.

Managing Third Parties in DataGrail

DataGrail is able to help you manage a list of third parties. This list can be governed on the application's settings page and used in DataGrail's email templates for third-party disclosures. The list will update every time it is saved, and the custom email template sent to the Data Subject will dynamically pull third parties at the time of processing.

  1. Navigate to Settings

  2. Select Third-Party Disclosures

  3. Add third parties in the text box. Each line will be a new bullet point.

Third Party Disclosures List

  1. Once the list of third parties has been added, click Save List. This information will be utilized in a variable as part of the custom email template, triggered when a request is processed.
Integrations and Systems

There is also an option to add a list of integrations connected to the platform or systems from Live Data Map. This should be used as a starting point but may not constitute a comprehensive list. Third-party lists should be reviewed by legal counsel.

Email Templates

The Email Template for processing a third-party disclosure request is named Third Party Disclosure Request Results, and the %third_party_disclosure% variable is used to send your list of third parties to the Data Subject.

This Email Template can be modified in your DataGrail settings page.

Third Party Email Template Variable

 

Need help?
If you have any questions, please reach out to your dedicated CSM or contact us at support@datagrail.io.

Disclaimer: The information contained in this message does not constitute as legal advice. We would advise seeking professional counsel before acting on or interpreting any material.