Skip to main content

Repository → 💼 SOC 2 → 💼 P6.0 Privacy Criteria Related to Disclosure and Notification

💼 P6.4 The entity obtains privacy commitments from vendors and other third parties who have access to personal information to meet the entity's objectives related to privacy.

  • ID: /frameworks/soc-2/p6/04

Description

The entity assesses those parties' compliance on a periodic and as-needed basis and takes corrective action, if necessary.

Similar

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 P6.4-1 Evaluates Third-Party Compliance With Privacy Commitmentsno data
💼 P6.4-2 Remediates Misuse of Personal Information by a Third Partyno data
💼 P6.4-3 Obtains Commitments to Report Unauthorized Disclosuresno data