Adequate Notice - Notice of Collection, v1.0

Defines privacy requirements that the fact that sensitive information is being collected is included in statements with respect to it.

Assessment Step

1
Adequate Notice - Notice Of Collection (AdequateNotice-NoticeOfCollection)
Does the organization require that sensitive information controller statements with respect to sensitive information include the fact that sensitive information is being collected?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) that support the assessor's response to this assessment step.
Parameter
Information Typesrequired
ENUM_MULTI : Select the type(s) of sensitive information that apply.
  • PII
  • PHI
  • III
  • IIHI
  • Other

Conformance Criteria (1)

C-1
Personal information controller statements with respect to personal information include the fact that personal information is being collected.
Citation
APEC
Section 15, Notice