A.18.1.4: Privacy and Protection of Personally Identifiable Information
Ensure compliance with relevant legislative, regulatory, and contractual requirements for privacy and the protection of personally identifiable information.
A.18.1.1: Identification of Applicable Legislation and Contractual Requirements
Identify and document the legislative, regulatory, and contractual requirements related to information security and the organization’s approach to meet these requirements.