PRI-03.4 ยท Revoke Consent

Control Description

Mechanisms exist to allow data subjects to revoke consent to collect, receive, process, store, transmit, update and/or share their Personal Data (PD).

Control Question
Assessment question for control validation

Does the organization allow data subjects to revoke consent to collect, receive, process, store, transmit, update and/or share their Personal Data (PD)?

Control Weighting
3
Validation Cadence
Annual
NIST CSF Function
Respond
Supply Chain Risk Management (SCRM) Tiers
Applicable SCRM tier levels for this control
Tier 2 - Operational
Core Control Designations
Special designations and baseline inclusions
MAD: PRI-03.4