Which of the following should internal auditors be attentive of when reviewing personal data consent and opt-in/opt-out management process?

Question

Fernando Pereira dos Santos · Accepted Answer

Whether the organization has established explicit and entitywide policies on data transfer to third parties.

Fernando Pereira dos Santos · Answer

Whether customers are asked to renew their consent for their data processing at least quarterly.

Fernando Pereira dos Santos · Answer

Whether private data is processed in accordance with the purpose for which the consent was obtained?

Fernando Pereira dos Santos · Answer

Whether customers have an opportunity to opt-out the right to be forgotten from organizational records and systems.

List of questions