💼 P6.1-3 Discloses Personal Information Only to Appropriate Third Parties
- Contextual name: 💼 P6.1-3 Discloses Personal Information Only to Appropriate Third Parties
- ID:
/frameworks/soc-2/p6/01/03 - Located in: 💼 P6.1 The entity discloses personal information to third parties with the explicit consent of data subjects and such consent is obtained prior to disclosure to meet the entity's objectives related to privacy.
Description
Personal information is disclosed only to third parties who have agreements with the entity to protect personal information in a manner consistent with the relevant aspects of the entity’s privacy notice or other specific instructions or requirements. The entity has procedures in place to evaluate that the third parties have effective controls to meet the terms of the agreement, instructions, or requirements.
Similar
- Internal
- ID:
dec-c-147bb8f5
- ID:
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|