PRI-03.9—Continued Use of Personal Data (PD)
Weight: 5
>Control Description
Mechanisms exist to govern the continued use of Personal Data (PD) as it is collected, received, processed, stored, transmitted, shared and/or updated until:
(1) Disposal of PD occurs when there is no longer a legitimate business purpose;
(2) Disposal of PD occurs when the data retention timeline for the use case is met; and/or
(3) Continued use of PD is prohibited upon withdrawal of data subject consent.
>Cross-Framework Mappings
US Data Privacy Framework
Texas CDPA
Virginia CDPA
Ask AI
Configure your API key to use AI features.