Disclosure of the Right to Object to Direct Marketing, v1.0
Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 21(4).
Assessment Step
|
1
Disclosure of the Right to Object to Direct Marketing (DisclosureoftheRighttoObjecttoDirectMarketing)
If and when personal data is processed for direct marketing purposes, does the entity explicitly inform the data subject of the right to object to such processing, and is this information presented clearly and separately from other information?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
|
Disclosure of the Right to Object to Direct Marketing
When personal data is processed for direct marketing purposes, the data controller must explicitly inform the data subject of the right to object to such processing, and must present this information clearly and separately from other information.
Citation
GDPR
Art. 21(4), Recital 70
|