SOC2-P7.1 P7.1 Quality of personal information
SOC2-P7.1 in SOC 2 (the AICPA 2017 Trust Services Criteria with the revised points of focus). All SOC 2 controls held. Open SOC 2 on the standards site.
The control as we hold it
P7.1 Quality of personal information. Personal information collected and kept is accurate, current, complete and relevant for privacy objectives. Points of focus: information is accurate and complete for its intended use; and it is relevant to its intended uses.
Reviewed and closest counterparts in the other frameworks
Reviewed rows come from a released pair; a closest match is the nearest held text and is not a reviewed row.
NIST SP 800-53 Rev 5
- NIST800-PM-22 PM-22 Personally Identifiable Information Quality Management (closest match)
- NIST800-PM-25 PM-25 Minimization of Personally Identifiable Information Used in Testing, Training, and Research (closest match)
- NIST800-PT-2 PT-2 Authority to Process Personally Identifiable Information (closest match)
- NIST800-PT-3 PT-3 Personally Identifiable Information Processing Purposes (closest match)
- NIST800-PT-7 PT-7 Specific Categories of Personally Identifiable Information (closest match)
- NIST800-RA-8 RA-8 Privacy Impact Assessments (closest match)
- NIST800-SI-18 SI-18 Personally Identifiable Information Quality Operations (closest match)
What an auditor commonly asks for
General guidance for this control area (domain: P - Privacy), in our words, not a statement of the standard and not binding on an assessor.
- the privacy notice and its change log
- the consent and preference records
- the data-subject request log with resolution
- the retention and disposal records