💼 P6.1-2 Discloses Personal Information Only When Appropriate

• Contextual name: 💼 P6.1-2 Discloses Personal Information Only When Appropriate
• ID: /frameworks/soc-2/p6/01/02
• Located in: 💼 P6.1 The entity discloses personal information to third parties with the explicit consent of data subjects and such consent is obtained prior to disclosure to meet the entity's objectives related to privacy.

Description

Personal information is disclosed to third parties only for the purposes for which it was collected or created and only when implicit or explicit consent has been obtained from the data subject, unless a law or regulation specifically requires otherwise.

Similar

• Internal
  • ID: dec-c-d920d61b

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags