Help Center/ Well-Architected Framework/ Well-Architected Framework and Practices/ Security Pillar/ Data Security and Privacy Protection/ SEC08 Data Privacy Protection/ SEC08-04 Data Collection Compliance

Updated on 2025-05-22 GMT+08:00

View PDF

SEC08-04 Data Collection Compliance

It refers to that the data controller shall comply with relevant laws, regulations, and privacy protection guidelines when collecting personal data, and ensure that data collection activities comply with laws and regulations and respect data subjects' rights.

Risk level
High
Key strategies
- Personal data collected only after data subjects' authorization is obtained
- Sensitive personal data collection must obtain explicit consent from data subjects.
- The collection scope, purposes, and processing method of using personal data shall not exceed those specified in the privacy statement and must comply with the minimization principle.
- Provide data subjects with a way to withdraw or change their consent after obtaining their consent.

Parent topic: SEC08 Data Privacy Protection

Previous topic: SEC08-03 Data Subjects' Choice and Consent

Next topic: SEC08-05 Compliance of Data Usage, Retention, and Disposal

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.