Define the audit method used to assess the privacy program in the privacy policy.

CONTROL ID
12390

CONTROL TYPE
Establish/Maintain Documentation

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

There are no implementation support Controls.

To conduct a regular survey of the status and practices of personal information processing, and to improve shortcomings; (Article 31(2) (2), Personal Information Protection Act)
The entity has procedures for identifying and addressing instances when non-compliance with information privacy policies and procedures are identified. (M1.2 Policy compliance, Privacy Management Framework, Updated March 1, 2020)
method of verification; and (§ III.6.b.iii.6., EU-U.S. Privacy Shield Framework Principles)