When your personal facts has not been attained directly from you but from A different resource, you need to get exactly the same facts as above (aside from the best to withdraw your consent). in the situation of processing based on genuine pursuits or around the functionality of the undertaking https://nathanlabsadvisory.com/achieving-fisma-certification-in-the-usa-ensuring-robust-information-security/