South Korea ISMS-P
3.2 Protection when retaining and using personal information – South Korea ISMS-P

South Korea ISMS-P 3.2.3: Protecting access to user devices

What does 3.2.3 require?

Where access to information stored on, or functions of, a user's mobile device is needed, the user is clearly informed and consents; services are not refused for declining non-essential permissions; and a way to withdraw consent to permissions is provided (Network Act Article 22-2).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 3.2 Protection when retaining and using personal information – South Korea ISMS-P

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll South Korea ISMS-P controls