PRIV-08—Record of Processing Activity
>Control Description
Organization documents, reviews, and approves a record of processing activities related to personal information.
Theme
Process
Type
Preventive
Policy/Standard
Privacy Policy>Implementation Guidance
1. Ensure appropriate process has been established to document and record all processing activities related to Personal Information. 2. Ensure the records of PII processing activities are reviewed periodically as per contractual requirements. 3. Ensure that the record is approved by appropriate personnel.
>Testing Procedure
1. Inspect a sample of reviews related to processing of personal information and validate that it is approved by the authorized personnel.
>Audit Artifacts
E-PRIV-08
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.