Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » ISO 27001 » Purpose Limitation

Purpose Limitation

In practice, organizations must:

– Clearly define the purpose of collecting personal data and their intention

– Specify your purposes by complying with documentation obligations;

– Perform transparency obligations to communicate to individuals about your purposes for collecting personal data; and

– Ensure that if you plan to disclose or use personal data for any purpose that is different or additional to the originally specified purpose, the new use should be fair, lawful, and transparent.

Additional reading

Comparing FedRAMP and NIST

Comparing FedRAMP and NIST: What’s the Difference?

Federal government contracts are vastly different from corporate ones. They have distinct control requirements and measures that need to be kept pace to safeguard sensitive data.  Not obtaining certain certifications can be a non-starter for companies in the public sector looking to obtain government contracts. And with each one having its own set of rules,…
A checklist for security essentials

The Ultimate Guide to Security Essentials for Organizations

Security essentials for organizations aren’t just about stopping cyberattacks – they are about making sure that organizations withstand evolving threats, prevent regulatory fines with security diligence, and maintain customer and stakeholder trust with strong security fundamentals rooted across the organization’s culture.  But here’s the catch – most of the security breaches, don’t happen because of…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.