graphgrc

SCF - DCH-18.1 - Minimize Personal Data (PD)

Mechanisms exist to limit Personal Data (PD) being processed in the information lifecycle to elements identified in the Data Protection Impact Assessment (DPIA).

Mapped framework controls

GDPR

Control questions

Does the organization limit Personal Data (PD) being processed in the information lifecycle to elements identified in the Data Protection Impact Assessment (DPIA)?