Enterprise Security Assessment > Data and Asset Security > Privacy

Is client scoped data handled that can be classfied as personally identifiable financial information under the Gramm-Leach-Bliley Act (GBLA)?

book reader icon
1 Minute
11/12/2024
facebook logo gray
linkedin logo gray
mail logo gray

No, as QR Planet renders no financial services, especially such requiring us to fall under the rules of the GBLA.

Last update 5 days ago

Is documentation of data flows and data inventories maintained for client scoped data based on data or information classification?

This practice aligns with data governance, security, and privacy standards QR Planet adheres to, especially when handling sensitive or classified client data.

For client scoped data, is personal information provided to the organization directly by the client?

Personal Information is provided directly by our clients. The collection, useage, processing and retention of such data happens in full complience with the GDPR

Are there documented policies in place to ensure that processing client scoped data is limited, and in compliance with applicable law?

QR Planet is fully GDPR complient. Access, transmission, processing, disclosure, and retention of client scoped data is in compliance with applicable law.

Is client scoped data aggregated, appended, or modeled using data analytics?

No. QR Planet does not use data analytics for such purposes.

Are policies and procedures in place to address third party privacy obligations including limitations on disclosure and use of client Scoped Data?

Data processing agreements defining scope, purpose and limitatios of data processing activities are established with third parties.