For privacy data, we must also further identify its attributes. The list of the attributes (purpose, ways of the collection, storage, format, retention period and so on.) will help to determine and review how to handle the privacy data. For example, some of the privacy data may be identified not a must to collect or no legal basis for collection, and the privacy data should never be collected.
|
Attributes
|
Describe related business flow or applications
|
|
Privacy data type |
Describe collected or processed privacy data, such as name, address, phone |
|
Purpose of collection |
Describe the objective of the data collection and the business |
|
Is it a must? |
Is the data collection essential to keep the business ... |
