Consent - Use To Provide Service, v1.0

Defines privacy requirements related to the use of sensitive information for purposes other than the purposes of collection.

Assessment Step

1
Consent - Use To Provide Service (Consent-UseToProvideService)
Does the organization permit sensitive information collected to be used for purposes other than the purposes of collection in order to provide a service or product requested by the individual whose information is collected?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) that support the assessor's response to this assessment step.
Parameter
Information Typesrequired
ENUM_MULTI : Select the type(s) of sensitive information that apply.
  • PII
  • PHI
  • III
  • IIHI
  • Other

Conformance Criteria (1)

C-1
Personal information collected is used for purposes other than the purposes of collection to provide a service or product requested by the individual whose information is collected.
Citation
APEC
Section 19, Uses of Personal Information