| Source | Azure Portal | ||||||
| Display name | Microsoft Managed Control 1849 - Individual Access | ||||||
| Id | 38512b01-6a68-45d6-bb97-189a9a0fbe5e | ||||||
| Version | 1.0.0 Details on versioning |
||||||
| Versioning |
Versions supported for Versioning: 0 Built-in Versioning [Preview] |
||||||
| Category | Regulatory Compliance Microsoft Learn |
||||||
| Description | Microsoft implements this Individual Participation and Redress control | ||||||
| Cloud environments | AzureCloud = true AzureUSGovernment = true AzureChinaCloud = unknown |
||||||
| Available in AzUSGov | The Policy is available in AzureUSGovernment cloud. Version: '1.0.0' Repository: Azure-Policy 38512b01-6a68-45d6-bb97-189a9a0fbe5e |
||||||
| Additional metadata |
Name/Id: ACF1849 / Microsoft Managed Control 1849 Category: Individual Participation and Redress Title: Individual Access - Adhere to Privacy Act/OMB Policies Ownership: Customer, Microsoft Description: Adheres to Privacy Act requirements and OMB policies and guidance for the proper processing of Privacy Act requests. Requirements: Microsoft Azure continues to abide by the terms of the Privacy Shield framework but will no longer rely on it as a basis for the transfer of personal data from the EU/EEA to the United States. Instead, the company relies on: * The Standard Contractual Clauses (also known as EU Model Clauses) as a lawful transfer mechanism for personal data from the EU and the European Economic Area. * An updated Microsoft Data Protection Addendum (DPA) for Online Services which reflects that transfers of personal data from the European Union, European Economic Area, Switzerland, and United Kingdom are now governed by the Standard Contractual Clauses (controller to processor) contained in Attachment 2 to the DPA. As a data processor, Microsoft provides the Data Subject Request (DSR) process through the Azure administrator dashboard. Since Azure is not a federal entity, Azure is not required to publish a notice within the Federal Register. Azure includes processes and procedures as shown within the Microsoft Privacy Statement for individuals to access their PII. |
||||||
| Mode | Indexed | ||||||
| Type | Static | ||||||
| Preview | False | ||||||
| Deprecated | False | ||||||
| Effect | Fixed audit |
||||||
| RBAC role(s) | none | ||||||
| Rule aliases | none | ||||||
| Rule resource types | IF (2) |
||||||
| Compliance | Not a Compliance control | ||||||
| Initiatives usage | none | ||||||
| History |
|
||||||
| JSON compare | n/a | ||||||
| JSON |
|