SFS 4 / SF B

Back to SFS 4

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are documented consent records maintained and limited to specified processing purposes for all personal data handled throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented consent records exist and explicitly limit processing to specified purposes

Assessment criterion and evidence

Actor: Organization processing personal data. Scope: All systems handling personal data. Evidence period: Review period. Required evidence: Consent records showing specified purposes. Negative criterion: Consent records missing or processing exceeds specified purposes. Missing evidence: Pending due to unavailable records

View the JSON record (opens in a new tab).

Assessment result: unset.