Specific Third-Party Considerations
While GAPP has many principles and criteria relating to third parties, one of the 10 is devoted to third-party relationships. This principle requires your organization to disclose personal information to third parties only for the purposes identified in the notice, and with the implicit or explicit consent of the individual. The criteria designed for the sole purpose of providing guidance for relationships with third parties are listed below.