id: "PT-04(03)" title: "Revocation" family: "PT" family_name: "PII Processing and Transparency" sort_id: "pt-04.03" priority: "P2" implementation_level: "organization" parent: "PT-04" enhancement: True
Statement
Implement {{ insert: param, pt-04.03_odp }} for individuals to revoke consent to the processing of their personally identifiable information.
Guidance
Revocation of consent enables individuals to exercise control over their initial consent decision when circumstances change. Organizations consider usability factors in enabling easy-to-use revocation capabilities.
Assessment Objective
the {{ insert: param, pt-04.03_odp }} are implemented for individuals to revoke consent to the processing of their personally identifiable information.
Personally identifiable information processing and transparency policy and procedures
consent revocation policies and procedures
consent revocation user interface or user experience
privacy plan
other relevant documents or records
Organizational personnel with personally identifiable information processing and transparency responsibilities
organizational personnel with user interface or user experience responsibilities
organizational personnel with information security and privacy responsibilities
Organizational processes for consenting to the processing of personally identifiable information
tools or mechanisms for implementing consent revocation