Assessment Objective
Determine if:
- PT-04(02) [Assignment: consent mechanisms] are presented to individuals [Assignment: frequency] and in conjunction with [Assignment: personally identifiable information processing].
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures
- consent policies and procedures
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with user interface or user experience responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for the collection of personally identifiable information
- mechanisms for obtaining just-in-time consent from users for the processing of their personally identifiable information
- mechanisms implementing just-in-time consent
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PT-04(02) Just-in-time Consent |