Page 48 - FIGI - Big data, machine learning, consumer protection and privacy

Indicator 6�1�1�6
Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for
those purposes, should be accurate, complete, and kept up-to-date.
Indicator 6�2�1�0
Clients are asked to consent to specific uses of their data. Consent requests explain clearly, in simple, local
language, how data will be used. Separate consent is required for: a) sharing data with specific third parties (to
be clearly identified) as part of service provision; b) reporting data to credit reporting bureaus; c) use of data
for marketing; d) sales to third parties; and e) use of geo-location data. For services delivered through USSD or
SMS, internet links to disclosure statements are not sufficient.
Indicator 6�2�2�0
The client right to opt out of a service and withdraw the permission granted to an organization to use data (of
whatever type) is clearly displayed and accessible to clients, together with the consequences of opting out.
Indicator 6�2�3�0
Clients have the right to obtain from the provider confirmation of whether or not the provider has data relating
to them, and if that request is rejected clients have the right to an explanation of the denial.
Indicator 6�2�3�1
Clients have the right to have data about them communicated to them within a reasonable timeframe without
excessive fees and using terminology that they can understand.
Indicator 6�2�3�2
Clients have the right to challenge data relating to them and, if the challenge is successful, to have the data
erased, rectified, completed, or amended.

46 Big data, machine learning, consumer protection and privacy