View Enisa Req

Requirement Nr : GP-OP-13
Description : Only share consumers’ personal data with third parties with consumers’ affirmative consent, unless required and limited for the use of product features or service operation.
Good Practice : Third-Party relationships
Is Fullfilled By :
Remarks :
Source : Baseline Security Recommendations for IoT in the context of Critical Information Infrastructures November 2017
Licence : Copyright Notice © European Union Agency for Network and Information Security (ENISA), 2017 Reproduction is authorised provided the source is acknowledged