SOC 2 Choice and Consent

Communicate choices and obtain consent for the collection, use, and disclosure of personal information.

P2.1 Choice and Consent

The entity communicates choices available regarding the collection, use, retention, disclosure, and disposal of personal information to the data subjects and the consequences, if any, of each choice. Explicit consent for the collection, use, retention, disclosure, and disposal of personal information is obtained from data subjects or other authorized persons, if required. Such consent is obtained only for the intended purpose of the information to meet the entity’s objectives related to privacy. The entity’s basis for determining implicit consent for the collection, use, retention, disclosure, and disposal of personal information is documented.

Need help putting this into practice? See our SOC 2 compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.