id: "PT-04(01)" title: "Tailored Consent" family: "PT" family_name: "PII Processing and Transparency" sort_id: "pt-04.01" priority: "P2" implementation_level: "organization" parent: "PT-04" enhancement: True
Statement
Provide {{ insert: param, pt-04.01_odp }} to allow individuals to tailor processing permissions to selected elements of personally identifiable information.
Guidance
While some processing may be necessary for the basic functionality of the product or service, other processing may not. In these circumstances, organizations allow individuals to select how specific personally identifiable information elements may be processed. More tailored consent may help reduce privacy risk, increase individual satisfaction, and avoid adverse behaviors, such as abandonment of the product or service.
Assessment Objective
{{ insert: param, pt-04.01_odp }} are provided to allow individuals to tailor processing permissions to selected elements of personally identifiable information.
Personally identifiable information processing and transparency policy and procedures
consent policies and procedures
consent tools and mechanisms
consent presentation or display (user interface)
privacy plan
other relevant documents or records
Organizational personnel with personally identifiable information processing and transparency responsibilities
organizational personnel with user interface or user experience responsibilities
organizational personnel with information security and privacy responsibilities
Organizational processes for consenting to the processing of personally identifiable information
consent tools or mechanisms
mechanisms implementing consent