System and Organization Controls (SOC) 2/Privacy/43 of 61
P4.1Limits the use of personal information
Control family: Privacy
Control description
The entity limits the use of personal information to the purposes identified in the entity's objectives related to privacy.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.