Requirement
The entity collects and maintains accurate, up-to-date, complete, and relevant personal information to meet the entity’s objectives related to privacy.
Points of Focus
Ensures Accuracy and Completeness of Personal Information [P][C]
Requirement: Personal information is accurate and complete for the purposes for which it is to be used.
Ensures Relevance of Personal Information [P][C]
Requirement: Personal information is relevant to the purposes for which it is to be used.
Explanation
Personal information must be accurate, up to date, complete, and relevant to the purposes it is used for. Auditors look for controls such as validation at collection, update mechanisms, and periodic reviews that stop the organization from making decisions about people based on wrong or outdated data.
