5.7 Performance evaluation

Section 5.7 requires organizations to regularly monitor and assess the effectiveness of their privacy information management system, using appropriate metrics, internal audits and management reviews to determine performance, identify improvements and ensure compliance with privacy objectives.