Under active development Content is continuously updated and improved
Home / Frameworks / US Data Privacy Framework / II — Principles

II Principles

Official SCF Download

40 principles in the Principles category

IIPrivacy Principles
II.1Notice
II.1.aNotice Requirements
II.1.a.iDPF Participation Disclosure
II.1.a.iiTypes of Personal Data Collected
II.1.a.iiiCommitment to Apply Principles
II.1.a.ivPurposes of Collection and Use
II.1.a.vContact Information for Inquiries
II.1.a.viThird-Party Disclosure
II.1.a.viiRight of Access
II.1.a.viiiChoices for Limiting Use and Disclosure
II.1.a.ixIndependent Dispute Resolution Body
II.1.a.xEnforcement Jurisdiction
II.1.a.xiBinding Arbitration Option
II.1.a.xiiLawful Disclosure Requirements
II.1.a.xiiiOnward Transfer Liability
II.1.bTiming of Notice
II.2Choice
II.2.aOpt-Out Choice for Disclosure and New Purposes
II.2.bAgent Exception to Choice
II.2.cSensitive Information Opt-In Consent
II.3Accountability for Onward Transfer
II.3.aTransfers to Third-Party Controllers
II.3.bTransfers to Third-Party Agents
II.4Security
II.4.aReasonable Security Measures
II.5Data Integrity and Purpose Limitation
II.5.aRelevance and Accuracy Requirements
II.5.bData Retention Limitations
II.6Access
II.6.aIndividual Right of Access
II.7Recourse, Enforcement and Liability
II.7.aMinimum Compliance Mechanisms
II.7.a.iIndependent Recourse Mechanisms
II.7.a.iiVerification Procedures
II.7.a.iiiRemediation and Sanctions
II.7.bResponse to Department and DPA Inquiries
II.7.cBinding Arbitration Obligation
II.7.dOnward Transfer Liability
II.7.ePublic Compliance Reporting