last sync: 2024-Sep-18 17:50:24 UTC

Microsoft Managed Control 1800 - Authority to Collect | Regulatory Compliance - Authority and Purpose

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1800 - Authority to Collect
Id 65c11daf-e754-406e-8d7b-f337dbd46a4f
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Authority and Purpose control
Additional metadata Name/Id: ACF1800 / Microsoft Managed Control 1800
Category: Authority and Purpose
Title: Authority to Collect
Ownership: Customer, Microsoft
Description: The organization determines and documents the legal authority that permits the collection, use, maintenance, and sharing of personally identifiable information (PII), either generally or in support of a specific program or information system need.
Requirements: Microsoft maintains the Microsoft Privacy Policy and End User License and publicly available legal notice sites, including the Microsoft Privacy Statement. Within this Privacy Statement, Microsoft documents the purpose, collection, use, maintenance, and sharing of information they collect. Microsoft communicates its privacy obligations to external entities via licensing terms in the Online Services Terms (OST) and Online Services Data Protection Addendum (DPA), and the Microsoft Privacy Statement. All services within Azure are subject to a privacy review. Privacy Managers are responsible for reviewing and approving new services based on the data inventory and data sensitivity. Microsoft legal personnel review all PII that is collected to ensure that a legal authority to collect the information exists. Microsoft documents the purpose of collection, use, maintenance, and sharing of this information via the following privacy sites: Microsoft has also completed a Privacy Impact Assessment (PIA) as a part of the security assessment process, available as a part of the Azure package.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 add 65c11daf-e754-406e-8d7b-f337dbd46a4f
JSON compare n/a
JSON
api-version=2021-06-01
EPAC