South Korea ISMS-P
3.1 Protection when collecting personal information – South Korea ISMS-P

South Korea ISMS-P 3.1.2: Limits on collection

What does 3.1.2 require?

Only the minimum personal information needed for the purpose is collected; when consent is sought, the data subject is told specifically that they may refuse items beyond the minimum; and goods or services are not refused because a data subject declines optional items (PIPA Articles 16 and 22).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 3.1 Protection when collecting personal information – South Korea ISMS-P

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.