5.6 Operation

Section 5.6 outlines the requirements for establishing, implementing and controlling the processes needed to operate the Privacy Information Management System, ensuring that privacy controls are applied consistently across the organization. It mandates ongoing monitoring, measurement and improvement of privacy-related activities to meet the objectives of the PIMS.