Privacy Policy
What is Privacy Policy?
A public-facing document that describes an organization's practices regarding the collection, use, disclosure, and management of personal data.
Terms that appear alongside privacy policy
Each of these is named in at least one of the same controls as privacy policy. The number is how many controls name both.
- policy 44 shared controls
- consent 11 shared controls
- transparency 6 shared controls
- privacy notice 5 shared controls
- health data 4 shared controls
- compliance 3 shared controls
- lawful basis 3 shared controls
- governance 3 shared controls
Frameworks that govern privacy policy
What the standards actually require on privacy policy
Requirements naming privacy policy across 6 standards, quoted from the control text.
The online privacy policy, and any California-specific rights statement (or the website, where no policy exists), must set out the consumer rights under sections 1798.100 to 1798.125 with at least two ways to submit requests;
ccpa-cpra::1798.130(a)(5) · Disclose rights and data practices in the privacy policy, refreshed yearly →Provide the capability for privileged administrators to configure [Assignment: organization-defined security or privacy policy filters] to support different security or privacy policies.
NIST800-AC-4(11) · AC-4(11) Information Flow Enforcement | Configuration of Security or Privacy Policy Filters →A child is anyone under thirteen; a controller or processor whose processing targets children must provide its privacy policy in a child-friendly form so that children and guardians understand the processing before consent is given.
nigeria-data-protection-regulation-ndpr::IF-5.5 · Children under thirteen: child-friendly privacy policy →A privacy policy is available, agreed at registration and on material update, stating the player data collected, the purpose of collection, the storage period, the conditions of disclosure and an affirmation that measures prevent unauthorised or unnecessary di...
gli-33-gaming-laboratories-international-event-wagering-systems::A.3.4 · A.3.4 Privacy Policy →Top management shall set a privacy policy that suits the organization's purpose, gives a basis for setting privacy objectives, commits the organization to meeting the requirements that apply to its processing of PII, and commits it to keep improving the privac...
iso-iec-27701-2025::5.2 · Privacy policy →Articles 30 and 30-2: every controller establishes and publishes a privacy policy stating purposes, processing and retention periods, third-party provision, destruction procedures and legally retained items, how sensitive information may be exposed and how to...
south-korea-pipa::30 · Publish a privacy policy with the prescribed content, and prefer the data subject where it conflicts with a contract →Questions people ask about privacy policy
What is Privacy Policy?
Why is Privacy Policy important for compliance?
Which compliance frameworks address Privacy Policy?
Where can I learn more about Privacy Policy?
See how Privacy Policy applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.