⭐ Repository → 💼 SOC 2 → 💼 P6.0 Privacy Criteria Related to Disclosure and Notification → 💼 P6.1 The entity discloses personal information to third parties with the explicit consent of data subjects and such consent is obtained prior to disclosure to meet the entity's objectives related to privacy.

💼 P6.1-2 Discloses Personal Information Only When Appropriate

• ID: /frameworks/soc-2/p6/01/02

Description

Personal information is disclosed to third parties only for the purposes for which it was collected or created and only when implicit or explicit consent has been obtained from the data subject, unless a law or regulation specifically requires otherwise.

Similar

• Internal
  • ID: dec-c-d920d61b

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance