SOC 2
Privacy
16 controls in this category. Click any control to see implementation guidance, evidence requirements, and common audit failures.
P1.1high
Privacy - Notice of Privacy Practices
Privacy
P2.1high
Privacy - Choice and Consent
Privacy
P3.1high
Privacy - Collection Limited to Identified Purpose
Privacy
P3.2high
Privacy - Explicit Consent Before Collection
Privacy
P4.1high
Privacy - Use of Personal Information Limited to Identified Purpose
Privacy
P4.2high
Privacy - Retention of Personal Information
Privacy
P4.3high
Privacy - Disposal of Personal Information
Privacy
P5.1high
Privacy - Access to Personal Information
Privacy
P5.2medium
Privacy - Correction of Personal Information
Privacy
P6.1high
Privacy - Disclosure to Third Parties
Privacy
P6.2medium
Privacy - Authorized Disclosures Only
Privacy
P6.4high
Privacy - Privacy Commitments from Vendors and Third Parties
Privacy
P6.6critical
Privacy - Notification of Breaches and Incidents
Privacy
P6.7medium
Privacy - Accounting of Disclosures
Privacy
P7.1medium
Privacy - Quality of Personal Information
Privacy
P8.1medium
Privacy - Monitoring and Enforcement
Privacy
Assess SOC 2 Privacy
Track every control, collect evidence, and generate audit-ready reports with AuditFront.
Start Free AssessmentFree plan · No credit card required