Under active development Content is continuously updated and improved

PRI-01.2Privacy Act Statements

Weight: 2

>Control Description

Mechanisms exist to provide additional formal notice to individuals from whom the information is being collected that includes: (1) Notice of the authority of organizations to collect Personal Data (PD); (2) Whether providing PD is mandatory or optional; (3) The principal purpose or purposes for which the PD is to be used; (4) The intended disclosures or routine uses of the information; and (5) The consequences of not providing all or some portion of the information requested.

>Cross-Framework Mappings

NIST SP 800-53 r5

SOC 2 TSC

SOC 2 TSC (Detailed)

Data Privacy Management Principles

Ask AI

Configure your API key to use AI features.