7152(a)(1)—7152(a)(1)
>Control Description
Identify and document in a risk assessment report the business’s purpose for processing consumers’ personal information. The purpose must not be identified or described in generic terms, such as “to improve our services” or for “security purposes.” By contrast, if a business is “improving the service” by decreasing consumers’ wait times when processing their privacy rights requests, the business may identify this decrease of wait times to process privacy rights requests as the relevant purpose.
Ask AI
Configure your API key to use AI features.