Sekit CSF · Privacy · Process

RCF-0368Privacy notices

Privacy notices are consistently displayed and kept current to reflect actual data processing practices

Mapping at a glance

RCF-0368Privacy noticesPrivacy · Process

A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022 · Annex A controls GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0 GV.PO-02Cybersecurity policy maintainedNIST CSF 2.0 A.8.5Information for interested partiesISO/IEC 42001:2023 — Annex A

RCF-0368 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.34Privacy and protection of personal identifiable information (PII)supportsReviewing the privacy notice whenever processing changes keeps the published text matching what the company does with personal data.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.OC-03Legal and regulatory requirements understood GV.PO-02Cybersecurity policy maintained

Maps to ISO/IEC 42001:2023 — Annex A

Curated mapping with the reasoning, not just the codes.

A.8.5Information for interested partiessupportsRCF-0368 keeps the privacy notice current whenever processing changes, a review cycle that should catch a new AI use case, provided someone flags the AI system as a change worth reviewing for.

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Privacy notice and consent records

The privacy information the company shows people before collecting their data (privacy notice / policy) and how consent is captured and respected.

From the Sekit evidence catalog

This topic through the other lenses

All Privacy controls

Ask Sekura: “What evidence proves RCF-0368?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.