When your personal knowledge has not been acquired directly from you but from A different source, you will need to obtain exactly the same info as previously mentioned (other than the appropriate to withdraw your consent). Those people organizations are obliged to take reasonable steps to tell other corporations (controllers) https://nathanlabsadvisory.com/copyright-currency-security-standard/