P3.2

For information requiring explicit consent, the entity communicates the need for such consent, as well as the consequences of a failure to provide consent for the request for personal information, and obtains the consent prior to the collection of the information to meet the entity’s objectives related to privacy.

Points of Focus

Informs Data Subjects of Consequences of Failure to Provide Consent [C]

Data subjects are informed of the consequences of failing to provide the entity with explicit consent.

Documents Explicit Consent to Retain Information [C]

Documentation of explicit consent for the collection, use, or disclosure of sensitive personal information is retained to support the achievement of entity objectives related to privacy.

Points of Focus​

Points of Focus