Privacy Considerations in a SOC 2® Examination

Service organizations have a lot at stake when it comes to data privacy. A single organization may possess the personal information of many user entities (customers) who want confidence that the personal information they share with the service organization is protected from disclosure as a result of a security event. User entities may also want transparency around the processes used (a) to request consent to gather personal information, (b) to manage the information that has been collected, and (c) to