When your individual info hasn't been attained straight from you but from One more source, you should acquire the same information as above (besides the right to withdraw your consent). It's also possible to request your personal facts for being transferred straight to Yet another company whose services you want https://nathanlabsadvisory.com/nist-800-cyber-security-frame-work/