PRI-09
Personal Data (PD) Lineage
Description
Mechanisms exist to maintain a process to document the lineage of Personal Data (PD) by recording how the organization collects, receives, processes, stores, transmits, shares, updates and/or disposes of PD.
Control Question
Does the organization document the lineage of Personal Data (PD) by recording how the organization collects, receives, processes, stores, transmits, shares, updates and/or disposes of PD?
Control Metadata
Domain:
Data Privacy
Validation Cadence:
Annual