To ensure the approved consent management requirements are translated into effective operational activities, controls, and services rather than remaining documented intentions.
Translate the approved consent management into plans, workstreams, controls, milestones, resources, and measurable outcomes. Track execution and resolve deviations through formal governance.
| FRAMEWORK CODE | FRAMEWORK NAME & DETAILS | FAMILY / CATEGORY | VERSION | ACTION |
|---|---|---|---|---|
| IRDAI | IRDAI Information & Cyber Security Guidelines IRDAI information and cyber-security requirements... Clause: §2.1-3.3 – Data Classification Process |
India
Guideline
|
vLatest | View → |
| SEBI-CSCRF | SEBI Cyber Security & Cyber Resilience Framework SEBI’s Cybersecurity and Cyber Resilience Framewor... Clause: 3.3 PR.DS: Data Security |
India
Regulation
|
vLatest | View → |
| ISO27002 | ISO/IEC 27002 ISO/IEC 27002 is a guidance standard containing a... Clause: 5.34 – Privacy and protection of PII |
ISO
Standard
|
v2022 | View → |
| NIST80053 | NIST SP 800-53 NIST SP 800-53 Rev. 5 presents control families, i... Clause: 3.15 – PERSONALLY IDENTIFIABLE INFORMATION PROCESSING AND TRANSPARENCY; PT-4 – CONSENT |
NIST
Control Catalog
|
vRev. 5 | View → |
| DPDP | Digital Personal Data Protection Act The Digital Personal Data Protection Act, 2023 est... Clause: 6(1) – Conditions for valid consent; 6(3) – Clear/plain-language consent request and contact details |
India
Law
|
v2023 | View → |
| GDPR | General Data Protection Regulation (GDPR) The General Data Protection Regulation is a bindin... Clause: Article 6(1)(a) – Consent as a lawful basis; Article 7 – Conditions for consent |
EU
Regulation
|
vCurrent | View → |
| NPCI-ISR | NPCI Information Security Requirements NPCI information-security requirements define cont... Clause: Security Measures / Controls; Data Privacy |
India
Standard
|
vLatest | View → |
| SOC2 | SOC 2 Trust Services Criteria SOC 2 is an independent examination and reporting... Clause: P2.1 – Privacy: Choice and Consent – The entity communicates choices available regarding the collection, use, retention, disclosure, and disposal of personal information to the data subjects and the consequences, if any, of each choice. Explicit consent for the collection, use, retention, disclosure, and disposal of personal information is obtained from data subjects or other authorized persons, if required. Such consent is obtained P3.2 – Privacy: Collection – For information requiring explicit consent, the entity communicates the need for such consent as well as the consequences of a failure to provide consent for the request for personal information and obtains the consent prior to the collection of the information to meet the entity’s objectives related to privacy. |
AICPA
Audit Framework
|
vLatest | View → |
| ISO27701 | ISO/IEC 27701 ISO/IEC 27701 provides requirements and guidance f... Clause: A.7.2.3; A.7.2.4; A.7.2.1; A.7.4.2; A.7.2.3 – Determine when and how consent is to be obtained; A.7.2.4 – Obtain and record consent; A.7.2.1 – Identify and document purpose; A.7.4.2 – Limit processing |
ISO
Privacy Standard
|
v2019 | View → |