last sync: 2023-Sep-29 17:58:48 UTC

Azure Policy definition

Microsoft Managed Control 1809 - Privacy Impact And Risk Assessment | Regulatory Compliance - Accountability, Audit, and Risk Management

Source Azure Portal
Display name Microsoft Managed Control 1809 - Privacy Impact And Risk Assessment
Id 6b04f815-52d7-4ff6-94bf-a4f22c07d5ae
Version 1.0.0
details on versioning
Category Regulatory Compliance
Microsoft docs
Description Microsoft implements this Accountability, Audit, and Risk Management control
Additional metadata Name/Id: ACF1809 / Microsoft Managed Control 1809
Category: Accountability, Audit, and Risk Management
Title: Privacy Impact And Risk Assessment - PIA in Accordance with Laws/Policies
Ownership: Customer, Microsoft
Description: Conducts Privacy Impact Assessments (PIAs) for information systems, programs, or other activities that pose a privacy risk in accordance with applicable law, OMB policy, or any existing organizational policies and procedures.
Requirements: A Privacy Impact Assessment (PIA) is conducted as a part of the initial assessment process. The PIA is conducted by Azure to determine the type and amount of sensitive, private data about individuals that is in or flowing through its system. Azure audits its own processes and sees how these processes affect or might compromise the privacy of the individuals whose data it holds, collects, or processes. The PIA is reviewed and updated on an annual basis.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 add 6b04f815-52d7-4ff6-94bf-a4f22c07d5ae
JSON compare n/a
JSON
api-version=2021-06-01