SOC 2 Collection

Collect personal information consistent with privacy objectives, with explicit consent where required.

P3.1 Collection of Personal Information

Personal information is collected consistent with the entity’s objectives related to privacy.
P3.2 Explicit Consent for Collection

For information requiring explicit consent, the entity communicates the need for such consent as well as the consequences of a failure to provide consent for the request for personal information and obtains the consent prior to the collection of the information to meet the entity’s objectives related to privacy.

Need help putting this into practice? See our SOC 2 compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.