Assessment Objective
Determine if:
- PT-03(01) data tags containing [Assignment: processing purposes] are attached to [Assignment: elements of personally identifiable information].
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures
- documented description of how data tags are used to identify personally identifiable information data elements and their authorized uses
- data tag schema
- data extracts with corresponding data tags
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with data tagging responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for authorizing the processing of personally identifiable information
- mechanisms supporting and/or implementing data tagging
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | PT-03(01) Data Tagging |