ISO 27701:2019
Additional ISO/IEC 27002 guidance for PII controllers, ISO 27701:2019

ISO 27701:2019 7.3.5: Providing mechanism to object to PII processing

The organization must provide a mechanism through which individuals can raise an objection to their data being processed, documenting the legal and regulatory requirements relating to objection such as objection to direct marketing, informing individuals of their ability to object in those situations, and providing a mechanism consistent with the type of service, so that an online service offers the capability online.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 17 controls across 10 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CCPA/CPRA · 3 controls

  • §1798.120 Right to Opt Out of Sale or Sharing of Personal Information
  • §1798.121 Right to Limit Use and Disclosure of Sensitive Personal Information
  • §1798.135(a) Do Not Sell or Share My Personal Information Link

SOC 2 · 3 controls

  • SOC2-P1.1 P1.1 Privacy notice to data subjects
  • SOC2-P2.1 P2.1 Choice and consent
  • SOC2-P8.1 P8.1 Inquiries, complaints, disputes and compliance monitoring

APPI · 2 controls

  • APPI-A27 Restriction on Provision to Third Parties
  • APPI-A35 Request for Cessation of Use, Erasure or Cessation of Third Party Provision
  • AUCDR-PS-7 Privacy Safeguard 7 - Use or disclosure of CDR data for direct marketing
  • APP-7 APP 7 - Direct marketing

GDPR · 1 control

ISO 27001:2022 · 1 control

  • 5.34 Privacy and protection of personal identifiable information (PII)

ISO 27002:2022 · 1 control

  • 5.34 Privacy and protection of PII

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Additional ISO/IEC 27002 guidance for PII controllers, ISO 27701:2019

You are reading one control. How much of ISO 27701:2019 have you already done?

ISO 27701:2019 7.3.5 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27701:2019 your existing evidence covers. Hold SOC 2 and 58 of 108 ISO 27701:2019 controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 289 were rejected on the SOC 2 pair alone.

Query this from an agent

The graph holds this control, the 17 it maps to, and the evidence behind each claim, over MCP and REST.