8. of Transfer III
We send personal data over email, but only within the company, so that should be fine, right?
|
Threat |
|
|
|
The personal information you are sharing in emails can be forwarded and you no longer have control over who will see the PII. |
|
GDPR |
Chapter 2, Art. 5 – 1. (f) Chapter 4, Art. 32 |
|
CCPA & CPRA |
CCPA 1798.100. General Duties of Businesses that Collect Personal Information (e) |
|
OECD |
Part 2, 11. Security Safeguards Principle |
|
Mitigations |
|
|
|
|
