Skip to main content

Repository → 💼 SOC 2 → 💼 P2.0 Privacy Criteria Related to Choice and Consent → 💼 P2.1 The entity communicates choices available regarding the collection, use, retention, disclosure, and disposal of personal information to the data subjects and the consequences, if any, of each choice.

💼 P2.1-4 Documents and Obtains Consent for New Purposes and Uses

  • ID: /frameworks/soc-2/p2/01/04

Description

If information that was previously collected is to be used for purposes not previously identified in the privacy notice, the new purpose is documented, the data subject is notified, and implicit or explicit consent is obtained prior to such new use or purpose.

Similar

  • Internal
    • ID: dec-c-9dea9c42

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance