Privacy Laws
Privacy is the right of an individual to demand the utmost care of their personal information that has been shared with any organization or individual. Individuals can demand the use of their information to be appropriate, legal, and only for the specific purpose for which the information was provided.
Figure 6.13: Privacy laws
ISACA describes several privacy principles that can be considered as a framework for privacy audits. The following are some of the privacy principles:
- Organizations should obtain appropriate consent before the transfer of personal information to another jurisdiction.
- Organizations should specify the purposes for which personal information is being collected.
- Organizations are required to retain personal information only as long as necessary.
- Organizations should have appropriate security safeguards for protecting personal information.
- Organizations should have an appropriate process for...
