graphgrc

SCF - PRI-03.2 - Just-In-Time Notice & Updated Consent

Mechanisms exist to present authorizations to process Personal Data (PD) in conjunction with the data action, when:

• The original circumstances under which an individual gave consent have changed; or
• A significant amount of time has passed since an individual gave consent.

  Mapped framework controls

  GDPR

• Art 12.2
• Art 12.3
• Art 12.4
• Art 13.3
• Art 14.3
• Art 21.4
• Art 7.1
• Art 7.2
• Art 7.3
• Art 7.4
• Art 8.1
• Art 8.2

SOC 2

• P2.1
• P3.2

Control questions

Does the organization present authorizations to process Personal Data (PD) in conjunction with the data action, when:

• The original circumstances under which an individual gave consent have changed; or
• A significant amount of time has passed since an individual gave consent?

This site is open source. Improve this page.