Assessment Objective
Determine if:
- PT-05(01) a notice of personally identifiable information processing is presented to individuals at a time and location where the individual provides personally identifiable information, in conjunction with a data action, or [Assignment: frequency].
Assessment Methods
Examine
- Personally identifiable information processing and transparency policy and procedures
- privacy notice
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with personally identifiable information processing and transparency responsibilities
- organizational personnel with user interface or user experience responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes and implementation support or mechanisms for providing notice to individuals regarding the processing of their personally identifiable information
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PT-05(01) Just-in-time Notice |