Assessment Objective
Determine if:
- PT-04 the [Assignment: tools or mechanisms] are implemented for individuals to consent to the processing of their personally identifiable information prior to its collection that facilitate individuals’ informed decision-making.
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures
- consent policies and procedures
- consent tools and mechanisms
- consent presentation or display (user interface)
- evidence of individuals’ consent
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for the collection of personally identifiable information
- consent tools or mechanisms for users to authorize the processing of their personally identifiable information
- mechanisms implementing consent
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | PT-04 Consent |