Sekit CSF · Privacy · Policy

RCF-0367Privacy notices

The company formally provides clear and complete privacy information to individuals before collecting their data

Mapping at a glance

RCF-0367Privacy noticesPrivacy · Policy

A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022 GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0 GV.PO-02Cybersecurity policy maintainedNIST CSF 2.0 A.8.5Information for interested partiesISO/IEC 42001:2023 — Annex A

RCF-0367 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.34Privacy and protection of personal identifiable information (PII)supportsA complete, plainly written privacy notice covering purposes, lawful bases and rights is the transparency piece of this control's obligations to individuals.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.OC-03Legal and regulatory requirements understood GV.PO-02Cybersecurity policy maintained

Maps to ISO/IEC 42001:2023 — Annex A

Curated mapping with the reasoning, not just the codes.

A.8.5Information for interested partiessupportsRCF-0367 requires a complete privacy notice covering purposes and rights, the right shape for AI transparency, but it was written for data collection generally and rarely names automated decision-making or AI processing specifically.

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Privacy notice and consent records

The privacy information the company shows people before collecting their data (privacy notice / policy) and how consent is captured and respected.

From the Sekit evidence catalog

This topic through the other lenses

All Privacy controls

Ask Sekura: “What evidence proves RCF-0367?”

Also via MCP, free with account