pri-032-just-in-timenotice&updatedconsent.md

SCF - PRI-03.2 - Just-In-Time Notice & Updated Consent

Mechanisms exist to present authorizations to process Personal Data (PD) in conjunction with the data action, when:

• The original circumstances under which an individual gave consent have changed; or
• A significant amount of time has passed since an individual gave consent.

Mapped framework controls

GDPR

• Art 12.2
• Art 12.3
• Art 12.4
• Art 13.3
• Art 14.3
• Art 21.4
• Art 7.1
• Art 7.2
• Art 7.3
• Art 7.4
• Art 8.1
• Art 8.2

SOC 2

• P2.1
• P3.2

Control questions

Does the organization present authorizations to process Personal Data (PD) in conjunction with the data action, when:

• The original circumstances under which an individual gave consent have changed; or
• A significant amount of time has passed since an individual gave consent?