Questions
- No
- Yes
- Not Applicable
Recommended Actions
An organisation should only collect and process personal data for and to the extent necessary for the specific purpose(s) informed to data subjects.
- Completed
- Not Applicable
- In Progress
Data subjects may request that an organisation ceases processing the personal data it holds about them. If a data subject makes such a request, an organisation shall retain only the amount of personal data pertaining to that data subject that is necessary to ensure that no further processing of their personal data takes place.
- Completed
- Not Applicable
- In Progress