When Your personal knowledge hasn't been attained directly from you but from One more supply, you should receive the same facts as over (besides the ideal to withdraw your consent). in the case of processing dependant on respectable pursuits or on the effectiveness of the activity in the general public https://nathanlabsadvisory.com/how-soc-2-compliance-protects-your-usa-business-from-cyber-attacks/