workflow
SOC 2 Privacy Criteria Assessment
Design-readiness review of the full SOC 2 privacy series: notice and choice, collection through disposal, data subject access and disclosure, and data quality with dispute monitoring (P1.1–P8.1), concluded with dual sign-off on the criteria-bearing final assessment. Design-readiness assessment limited to the listed SOC 2 criteria. Evidence may include operating examples to assess the design; this module does not provide a SOC 2 Type II opinion. Attach this workflow to the existing audit engagement item; retain evidence and conclusions on its workflow steps.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-10-04T21:48:26Z (791ff2dd3a45)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- domain
- audit
- department
- internal-audit
- lineOfDefense
- assure
Details
- teams
- internal-audit
- domains
- audit
- standards
- soc2
- sourceTemplateId
- workflow-library:audit-soc2-privacy-criteria-assessment
- releaseId
- sha256:df943c3255f1ce93134d457888e06a875af57e5e2e15b38184a8aaa8682d88a7
- canonicalUrl
- https://evidenceflows.com/workflows/all/?w=audit-soc2-privacy-criteria-assessment
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- assure
- controls
- UC-DATA-01
- UC-DATA-02
- UC-DATA-03
- UC-DATA-05
- UC-DATA-06
- UC-DATA-07
- UC-DATA-09
- UC-DATA-14
- UC-DATA-15
- UC-DATA-16
- UC-DATA-17
- roleIntegrity
- activityCount
- 0
- ermPhases
- lineRoles
- serviceModes
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:df943c3255f1ce93134d457888e06a875af57e5e2e15b38184a8aaa8682d88a7
Connections
- SOC 2 Privacy Criteria Assessment tests UC-DATA-01 — Process personal data only under a documented lawful basis
- SOC 2 Privacy Criteria Assessment tests UC-DATA-06 — Provide data subjects access to their personal data
- SOC 2 Privacy Criteria Assessment tests UC-DATA-15 — Record and notify unauthorized disclosures of personal data
- SOC 2 Privacy Criteria Assessment tests UC-DATA-02 — Obtain and honor consent for collection, use, and disclosure
- SOC 2 Privacy Criteria Assessment tests UC-DATA-14 — Maintain and provide an accounting of disclosures
- SOC 2 Privacy Criteria Assessment tests UC-DATA-05 — Provide privacy notices and transparency to data subjects
- SOC 2 Privacy Criteria Assessment tests UC-DATA-17 — Resolve privacy inquiries, complaints, and disputes
- SOC 2 Privacy Criteria Assessment tests UC-DATA-09 — Retain personal and confidential data per schedule, then destroy it
- SOC 2 Privacy Criteria Assessment tests UC-DATA-16 — Bind third parties handling personal data to privacy commitments
- SOC 2 Privacy Criteria Assessment tests UC-DATA-07 — Keep personal data accurate and honor correction requests
- SOC 2 Privacy Criteria Assessment tests UC-DATA-03 — Limit personal-data use to stated purposes and minimum necessary