Third Party Disclosure Configuration
With the passage of Oregon Consumer Privacy Act and the Minnesota Consumer Data and Privacy Act, businesses in those states must provide consumers with a list of third parties with whom they share consumer data starting July 1st, 2024
Definition of a Third Party
A third party is a natural or legal person, public authority, agency, or body other than the consumer, controller, processor, or an affiliate of the processor or the controller. Vendors with a data processing agreement, such as a third-party SaaS tool, are exempt from third-party disclosure.
Public agencies, public authorities, business partners, social media networks, advertising companies (behavioral advertising), and entities during a merger, acquisition, or insolvency.
Managing Third Parties in DataGrail
DataGrail is able to help you manage a list of third parties. This list can be governed on the application's settings page and used in DataGrail's email templates for third-party disclosures. The list will update every time it is saved, and the custom email template sent to the Data Subject will dynamically pull third parties at the time of processing.
-
Navigate to Settings
-
Select Third-Party Disclosures
-
Add third parties in the text box. Each line will be a new bullet point.
- Once the list of third parties has been added, click Save List. This information will be utilized in a variable as part of the custom email template, triggered when a request is processed.
There is also an option to add a list of integrations connected to the platform or systems from Live Data Map. This should be used as a starting point but may not constitute a comprehensive list. Third-party lists should be reviewed by legal counsel.
Email Templates
The Email Template for processing a third-party disclosure request is named Third Party Disclosure Request Results, and the %third_party_disclosure%
variable is used to send your list of third parties to the Data Subject.
This Email Template can be modified in your DataGrail settings page.
Disclaimer: The information contained in this message does not constitute as legal advice. We would advise seeking professional counsel before acting on or interpreting any material.