SOC 2 Use, Retention, and Disposal
Limit use of personal information to identified purposes, retain it only as long as needed, and dispose of it securely.
-
P4.1 Limitation of Use
The entity limits the use of personal information to the purposes identified in the entity’s objectives related to privacy.
-
P4.2 Retention of Personal Information
The entity retains personal information consistent with the entity’s objectives related to privacy.
-
P4.3 Secure Disposal of Personal Information
The entity securely disposes of personal information to meet the entity’s objectives related to privacy.
Need help putting this into practice? See our SOC 2 compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo