Adequate Notice - Location of Personal Information Controller, v1.0

Defines privacy requirements that the location of the sensitive information controller is included in statements with respect to sensitive information.

Assessment Step

1
Adequate Notice - Location Of Personal Information Controller (AdequateNotice-LocationOfPersonalInformationController)
Does the organization require that sensitive information controller statements with respect to sensitive information include the location of the sensitive information controller?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) that support the assessor's response to this assessment step.
Parameter
Information Typesrequired
ENUM_MULTI : Select the type(s) of sensitive information that apply.
  • PII
  • PHI
  • III
  • IIHI
  • Other

Conformance Criteria (1)

C-1
Personal information controller statements with respect to personal information include the location of the personal information controller.
Citation
APEC
Section 15, Notice