Australia Consumer Data Right - Banking (CDR) AUCDR-PS-1: Privacy Safeguard 1 - Open and transparent management of CDR data

What else in your programme already covers this

This control maps to 25 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

APEC Cross-Border Privacy Rules (CBPR) System · 4 controls

CBPR-01 Notice
CBPR-PR-01 Privacy statement published
CBPR-PR-37 Access to personal information
CBPR-PR-39 Measures to ensure compliance

ISO 27701:2019 · 4 controls

5.3.2 Policy
6.15.1 Compliance with legal and contractual requirements
7.2.8 Records related to processing PII
7.3.3 Providing information to PII principals

GDPR · 3 controls

GDPR-Art.12 Transparent information, communication and modalities for rights
GDPR-Art.13 Information to be provided where personal data are collected
GDPR-Art.24 Responsibility of the controller

NIST SP 800-53 Rev 5 · 3 controls

NIST800-PM-20 PM-20 Dissemination of Privacy Program Information
NIST800-PT-1 PT-1 Policy and Procedures
NIST800-PT-5 PT-5 Privacy Notice

NIST SP 800-161 Rev 1 · 2 controls

161R1-PM-20 Dissemination of Privacy Program Information
161R1-PT-1 Policy and Procedures

SOC 2 · 2 controls

SOC2-P1.1 P1.1 Privacy notice to data subjects
SOC2-P8.1 P8.1 Inquiries, complaints, disputes and compliance monitoring

Australian Privacy Principles (APPs) · 1 control

APP-1 APP 1 - Open and transparent management of personal information

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-DSP-01 Security and Privacy Policy and Procedures

FedRAMP High · 1 control

PL-1 Policy and Procedures

ISO 27001:2022 · 1 control

5.34 Privacy and protection of personal identifiable information (PII)

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-GV.PO-01 Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of Australia Consumer Data Right - Banking (CDR) have you already done?

Australia Consumer Data Right - Banking (CDR) AUCDR-PS-1 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of Australia Consumer Data Right - Banking (CDR) your existing evidence covers. Hold ISO 27701:2019 and 16 of 24 Australia Consumer Data Right - Banking (CDR) controls already carry evidence.

If you hold ISO 27701:201966.7% covered · 8 gaps If you hold APEC Cross-Border Privacy Rules (CBPR) System62.5% covered · 9 gaps If you hold GDPR58.3% covered · 10 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.145.8% covered · 13 gaps If you hold C5 (Germany)41.7% covered · 14 gaps If you hold FedRAMP Moderate41.7% covered · 14 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the ISO 27701:2019 pair alone.

See the released pairs, $299 each Browse the graph free