⭐ Repository → 💼 SOC 2 → 💼 P2.0 Privacy Criteria Related to Choice and Consent → 💼 P2.1 The entity communicates choices available regarding the collection, use, retention, disclosure, and disposal of personal information to the data subjects and the consequences, if any, of each choice.

💼 P2.1-5 Obtains Explicit Consent for Sensitive Information

• ID: /frameworks/soc-2/p2/01/05

Description

Explicit consent is obtained directly from the data subject when sensitive personal information is collected, used, or disclosed, unless a law or regulation specifically requires otherwise.

Similar

• Internal
  • ID: dec-c-c4432d8e

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance