7156(a)(1)—7156(a)(1)
>Control Description
For example, Business E sells toys to children and is considering using in-store paperforms to collect names, mailing addresses, and birthdays from children that visittheir stores, and to use that information to mail a coupon and list of age-appropriatetoys to each child during the child’s birth month and every November. Business Euses the same service providers and technology for each category of mailings acrossall stores. Business E must conduct a risk assessment, including documentingrequired information in its risk assessment report, because it is processing sensitivepersonal information. Business E may use a single risk assessment for processing thepersonal information for the birthday mailing and November mailing across allstores because in each case it is collecting the same personal information in thesame way for the purpose of sending coupons and age-appropriate toy lists tochildren, and this processing presents similar risks to consumers’ privacy.
Ask AI
Configure your API key to use AI features.