SFS 4 / SF 3

Back to SFS 4

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are third-party data sharing agreements documented with required privacy protections for organization-owned information throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Signed agreements include enforceable privacy terms matching data classification levels

Assessment criterion and evidence

Actor: Organization. Scope: Third-party data sharing agreements covering external processors and partners. Evidence period: review period. Required evidence: Executed data processing agreements; Privacy-specific clause inventories per data class. Negative criterion: Missing privacy clauses or non-compliant terms in active sharing agreements. Missing evidence: Pending documentation review

View the JSON record (opens in a new tab).

Assessment result: unset.