5.8 Improvement

Clause 5.8 requires the organization to continually improve its privacy information management system by using results from monitoring, audits, incidents and corrective actions to identify and implement enhancements to privacy controls and processes. It mandates documented procedures for assessing performance, determining improvement opportunities and applying changes that increase the effectiveness of the PIMS.