INQ-04—Limiting Access to or Disclosure of Data in Investigation Requests
>Control Description
The Cloud Service Provider's procedures establishing access to or disclosing data of cloud customers in the context of investigation requests from governmental agencies ensure that the agencies only gain access to or insight into the data that is the subject of the investigation request.
If no clear limitation of the data is possible, the Cloud Service Provider anonymises or pseudonymises the data so that government agencies can only assign it to those cloud customers who are subject of the investigation request.
Additional criteria: -
Ask AI
Configure your API key to use AI features.