Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue
PT: Personal information handling and transparency – Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue

Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue PT-04: PT-04 Consent

The organisation ensures consent is obtained in writing or otherwise documented with date and time; in the federal government it provides means for informed consent to secondary uses or indirect collection stating the purpose, the elements involved, for indirect collection the sources and reason, the inconsistent uses or disclosures, consequences of withholding and alternatives; in the private sector it provides means for meaningful consent to collection, use and disclosure. The GC discussion explains that federal institutions need legislative authority, with consent only for secondary purposes or indirect collection, and that consent never replaces authority. 4 enhancements, including the Canada-specific (400) Tailored consent private sector. Not allocated to the medium-profile baseline.

Maintained by Gerard Blokdyk

Other controls in PT: Personal information handling and transparency – Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.