Logo

CISOBot - Your AI CISO Assistant

PRI-07

Information Sharing With Third Parties

Weight: 9/10
Description

Mechanisms exist to disclose Personal Data (PD) to third-parties only for the purposes identified in the data privacy notice and with the implicit or explicit consent of the data subject.

Control Question

Does the organization disclose Personal Data (PD) to third-parties only for the purposes identified in the data privacy notice and with the implicit or explicit consent of the data subject?

Control Metadata
Domain:

Data Privacy

Validation Cadence:

Annual

Evidence Request List:

E-PRI-05 E-TPM-01

Have questions about this control?

Ask CISOBot for implementation guidance and best practices