last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1832 - Minimization of Personally Identifiable Information | Regulatory Compliance - Data Minimization and Retention

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1832 - Minimization of Personally Identifiable Information
Id 2fd50ffd-c983-4fab-862c-678b95bfaf5a
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Data Minimization and Retention control
Additional metadata Name/Id: ACF1832 / Microsoft Managed Control 1832
Category: Data Minimization and Retention
Title: Minimization of Personally Identifiable Information - Review of Collected PII
Ownership: Customer, Microsoft
Description: Conducts an initial evaluation of PII holdings and establishes and follows a schedule for regularly reviewing those holdings periodically, at least annually to ensure that only PII identified in the notice is collected and retained, and that the PII continues to be necessary to accomplish the legally authorized purpose.
Requirements: Azure reviews its PII holdings annually. Azure has established and implemented a scheduled review of its PII by the Azure privacy team to take place annually to ensure PII is collected and retained as required by the Microsoft Privacy Standard, Microsoft Privacy Policy, and Azure Privacy SOP.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 add 2fd50ffd-c983-4fab-862c-678b95bfaf5a
JSON compare n/a
JSON
api-version=2021-06-01
EPAC