REQ.189 Specify the purpose of data collection
This document contains the details of the security requirements related to the definition and management of data access in the organization. This requirement establishes the importance of specifying the purpose of personal data collection in order to fulfil all legal requirements
The system must specify the purpose of the personal data collection (OECD.9, ISACA.G31.3.).