⭐ Repository → 💼 SOC 2 → 💼 P3.0 Privacy Criteria Related to Collection → 💼 P3.1 Personal information is collected consistent with the entity's objectives related to privacy.

💼 P3.1-2 Collects Information by Fair and Lawful Means

• ID: /frameworks/soc-2/p3/01/02

Description

Methods of collecting personal information are reviewed by management before they are implemented to confirm that personal information is obtained (a) fairly, without intimidation or deception, and (b) lawfully, adhering to all relevant rules of law, whether derived from statute or common law, relating to the collection of personal information.

Similar

• Internal
  • ID: dec-c-18683219

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance