7.5 PII sharing, transfer and disclosure

Entry 7_5 in ISO/IEC 27701:2019 defines the requirements for sharing, transferring and disclosing personal data, requiring organizations to identify a lawful basis, obtain consent where needed, and document the purpose, recipients and security measures. It also mandates contractual or other safeguards for third-party processing and regular monitoring of compliance.