ISO 27701:2019 7.4.1: Limit collection

What else in your programme already covers this

This control maps to 31 controls across 17 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 8 controls

NIST800-PL-8 PL-8 Security and Privacy Architectures
NIST800-PM-25 PM-25 Minimization of Personally Identifiable Information Used in Testing, Training, and Research
NIST800-PT-2 PT-2 Authority to Process Personally Identifiable Information
NIST800-PT-3 PT-3 Personally Identifiable Information Processing Purposes
NIST800-RA-8 RA-8 Privacy Impact Assessments
NIST800-SA-17 SA-17 Developer Security and Privacy Architecture and Design
NIST800-SA-24 SA-24 Design For Cyber Resiliency
NIST800-SA-8 SA-8 Security and Privacy Engineering Principles

PCI DSS 4.0 · 4 controls

3.3.3 3.3.3 Issuer SAD storage limited, justified and encrypted
3.5.1 3.5.1 Stored PAN rendered unreadable
3.2.1 3.2.1 Data retention and disposal minimise stored account data
3.3.1 3.3.1 SAD not retained after authorization, even encrypted

APEC Cross-Border Privacy Rules (CBPR) System · 3 controls

CBPR-02 Collection Limitation
CBPR-PR-06 Collection limited to relevant information
CBPR-PR-14 Choice over collection

ISO 27001:2022 · 2 controls

5.34 Privacy and protection of personal identifiable information (PII)
5.8 Information security in project management

SOC 2 · 2 controls

SOC2-P3.1 P3.1 Collecting personal information consistent with objectives
SOC2-P7.1 P7.1 Quality of personal information

APPI · 1 control

APPI-A20 Proper Acquisition and Special Care Required Personal Information

Australia Consumer Data Right - Banking (CDR) · 1 control

AUCDR-PS-3 Privacy Safeguard 3 - Seeking to collect CDR data from CDR participants

Australian Privacy Principles (APPs) · 1 control

APP-3 APP 3 - Collection of solicited personal information

C5 (Germany) · 1 control

C5-OPS-11 Logging and Monitoring - Metadata Management Concept

CCPA/CPRA · 1 control

CCR §7060 Consumer Identity Verification

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-DSP-08 Data Privacy by Design and Default

GDPR · 1 control

GDPR-Art.25 Data protection by design and by default

ISO 19011:2018 · 1 control

7.2.5 Achieving audit team leader competence

ISO 45001:2018 · 1 control

7.4.1 General

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of ISO 27701:2019 have you already done?

ISO 27701:2019 7.4.1 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27701:2019 your existing evidence covers. Hold SOC 2 and 58 of 108 ISO 27701:2019 controls already carry evidence.

If you hold SOC 253.7% covered · 50 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.147.2% covered · 57 gaps If you hold NIST Cybersecurity Framework 2.047.2% covered · 57 gaps If you hold ISO 27001:202243.5% covered · 61 gaps If you hold Australia Consumer Data Right - Banking (CDR)35.2% covered · 70 gaps If you hold C5 (Germany)34.3% covered · 71 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 289 were rejected on the SOC 2 pair alone.

See the released pairs, $299 each Browse the graph free