Back

Include the time period for when the data processing will be carried out in the privacy policy.


CONTROL ID
00408
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Define what is included in the privacy policy., CC ID: 00404

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • The period of time during which the personal information is possessed and used, and the procedure and method for destruction of the personal information (including the ground for preservation and items of preserved personal information, if it is required to preserve the personal information in accor… (Article 27-2(2)(3), Act On Promotion of Information and Communications Network Utilization and Information Protection, Amended by Act No. 14080, Mar. 22, 2016)
  • A recordkeeper shall maintain a record that states the period each record type is kept. (§ 14 Prin. 5(3)(d), Act No. 119 of 1988 as amended, taking into account amendments up to Freedom of Information Amendment (Parliamentary Budget Office) Act 2012)
  • (Art 11.f, Bosnia Law on Protection of Personal Data)
  • (Art 6.2.e, Greece Law Protection of personal data and privacy in electronic telecommunications sector (Law 3471))
  • (§ 551(a)(1)(C), Cable Communications Privacy Act Title 47 § 551)