Josef Kamara, CPA, CISSP, CISA · Updated May 6, 2026 · 1 minute read

Privacy

One of five SOC 2 Trust Services Criteria, addressing how personal information is collected, used, retained, disclosed, and disposed. Privacy controls map to GAPP principles and overlap with GDPR and CCPA requirements.