graphgrc

SCF - PRI-02.1 - Purpose Specification

Mechanisms exist to identify and document the purpose(s) for which Personal Data (PD) is collected, used, maintained and shared in its data privacy notices.

Mapped framework controls

GDPR

ISO 27002

Control questions

Does the organization identify and document the purpose(s) for which Personal Data (PD) is collected, used, maintained and shared in its data privacy notices?