graphgrc

SOC2 - P6.7

The entity provides data subjects with an accounting of the personal information held and disclosure of the data subjects’ personal information, upon the data subjects’ request, to meet the entity’s objectives related to privacy

Identifies Types of Personal Information and Handling Process

The types of personal information and sensitive personal information and the related processes, systems, and third parties involved in the handling of such information are identified

Captures, Identifies, and Communicates Requests for Information

Requests for an accounting of personal information held and disclosures of the data subjects’ personal information are captured, and information related to the requests is identified and communicated to data subjects to meet the entity’s objectives related to privacy.

Mapped SCF controls