graphgrc

SCF - PRI-09 - Personal Data Lineage

Mechanisms exist to utilize a record of processing activities to maintain a record of Personal Data (PD) that is stored, transmitted and/or processed under the organization’s responsibility.

Mapped framework controls

GDPR

Control questions

Does the organization utilize a record of processing activities to maintain a record of Personal Data (PD) that is stored, transmitted and/or processed under the organization’s responsibility?