Data Classification & Handling
Mechanisms exist to perform periodic checks of temporary files for the existence of Personal Data (PD).
Data Classification & Handling
Level N/A
Mechanisms exist to inventory, document and maintain data flows for data that is resident (permanently or temporarily) within a service's geographically distributed applications (physical and virtual), infrastructure, systems components and/or shared with other third-parties.
Data Classification & Handling
Level N/A
Mechanisms exist to protect archived data in accordance with applicable statutory, regulatory and contractual obligations.
Data Classification & Handling
Level N/A
Mechanisms exist to securely dispose of, destroy or erase information.
Data Classification & Handling
Level N/A
Mechanisms exist to check for the accuracy, relevance, timeliness, impact, completeness and de-identification of information across the information lifecycle.
Data Classification & Handling
Level N/A
Mechanisms exist to utilize technical controls to correct Personal Data (PD) that is inaccurate or outdated, incorrectly determined regarding impact, or incorrectly de-identified.
Data Classification & Handling
Level N/A
Mechanisms exist to utilize data tags to automate tracking of sensitive/regulated data across the information lifecycle.
Data Classification & Handling
Mechanisms exist to collect Personal Data (PD) directly from the individual.
Data Classification & Handling
Level N/A
Mechanisms exist to anonymize data by removing Personal Data (PD) from datasets.
Data Classification & Handling
Level N/A
Mechanisms exist to de-identify the dataset upon collection by not collecting Personal Data (PD).
