Privacy Policy
What is Privacy Policy?
A public-facing document that describes an organization's practices regarding the collection, use, disclosure, and management of personal data.
Terms that appear alongside privacy policy
Each of these is named in at least one of the same controls as privacy policy. The number is how many controls name both.
- policy 44 shared controls
- consent 11 shared controls
- transparency 6 shared controls
- privacy notice 5 shared controls
- health data 4 shared controls
- compliance 3 shared controls
- lawful basis 3 shared controls
- governance 3 shared controls
Frameworks that govern privacy policy
What the standards actually require on privacy policy
Requirements naming privacy policy across 6 standards, quoted from the control text.
The privacy policy clearly and completely describes the operator's personal-information practices: types of PI collected, how it is collected (active/passive), how it is used, disclosures to third parties (incl.
ESRB-PC-06 · Online Privacy Notice (privacy policy) →Businesses must include in their online privacy policy or California-specific description: a description of consumer rights, methods for submitting requests, categories of PI collected/sold/shared/disclosed in the preceding 12 months, categories of sources, bu...
§1798.130(a)(3) · Privacy Policy Content Requirements →An operator that collects personally identifiable information about Delaware residents through a commercial internet service must make its privacy policy conspicuously available (e.g., via a link containing the word privacy on the homepage or first significant...
DE-DOPPA-1205C-POST · Conspicuous posting of a privacy policy →Schedule 1 DPP5 Openness Principle requires a data user to take all practicable steps to ensure that a person can ascertain the data user policies and practices in relation to personal data, the kinds of personal data held, and the main purposes for which pers...
HK-PDPO-DPP5-Openness-Privacy-Policy-Statement · HK PDPO DPP5 Openness Principle + Privacy Policy Statement (PPS) + Transparency →In addition to direct notice, the operator must post a prominent, clearly labelled link to an online notice of its information practices regarding children on the home or landing page and at each area where personal information is collected.
COPPA-312.4d · Online Notice of Information Practices (Privacy Policy) →Keep approved policies for classifying, protecting and handling data across its whole lifecycle in line with applicable law, standards and assessed risk, and review them at least annually.
CCM-DSP-01 · Security and Privacy Policy and Procedures →Questions people ask about privacy policy
What is Privacy Policy?
Why is Privacy Policy important for compliance?
Which compliance frameworks address Privacy Policy?
Where can I learn more about Privacy Policy?
See how Privacy Policy applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.