SFS 4 / SF F

Back to SFS 4

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are organization-owned personal data assets processed using anonymization or pseudonymization techniques to minimize identifiability throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented implementation of anonymization/pseudonymization applied to personal data storage

Assessment criterion and evidence

Actor: Organization. Scope: Personal data assets across all storage systems (local, network-attached, cloud). Evidence period: Review period. Required evidence: Technical documentation showing anonymization/pseudonymization application; Configuration records for storage systems handling personal data. Negative criterion: Personal data stored in directly identifiable form without anonymization/pseudonymization. Missing evidence: Pending verification when no implementation records exist

View the JSON record (opens in a new tab).

Assessment result: unset.