Law / Frameworks / NIST Privacy Framework / Govern-P
NIST Privacy Framework, Govern-PGV.MT-P1
Privacy risk is re-evaluated on an ongoing basis and as key factors, including the organization’s business environment (e.g., introduction of new technologies), governance (e.g., legal obligations, risk tolerance), data processing, and systems/products/services change.NIST Privacy Framework, version 1.0, January 2020, GV.MT-P1
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 2
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 0
- not yet in force
Comprehensive regime
2 laws, 2 jurisdictions| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 Cabo Verde |
Law No. 133/V/2001 on the Protection of Personal Data, data protection impact assessment |
Where necessary, seek the views of data subjects or their representatives on the intended processing, and review whether the processing follows the assessment, at least when the risk changes (Article 29(8) and (9)). |
 North Macedonia |
Law on Personal Data Protection (LPDP), video surveillance |
Analyse the goal of a video surveillance system before installing it, and reassess it every two years, covering the continuing need for it, its goals, and feasible technical alternatives. |
Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.
framework