What if someone requests access to a record that was originally created by another organization?

As long as the record is in your custody or under your control, then you are responsible for determining whether to provide access to the record, even if it was created by someone else.

It is possible to have custody or control of a record that was not originally created by your organization.

Learn more about how to determine if a record is in your custody or control in our guide to Providing Access to Personal Information under the CYFSA