Loading clauses/5.Requirements.md +6 −3 Original line number Diff line number Diff line Loading @@ -242,9 +242,12 @@ The VPN provider shall not collect PII without explicit authorization. VPN provider shall not send PII outside of the endpoint at all. * Test: Packet capture during typical hour of use * Result: No PII is sent * Output: Packet capture * Reference: TR-DMIN * Objective: Data minimization * Preparation: Packet capture during typical hour of use and document all data sent to the VPN provider * Activities: Review the documentation of the packet capture for any form of PII * Verdict: There is no PII collected => PASS, otherwise FAIL * Evidence: Packet capture #### 5.2.X.x **MI-NPII-3**: Loading Loading
clauses/5.Requirements.md +6 −3 Original line number Diff line number Diff line Loading @@ -242,9 +242,12 @@ The VPN provider shall not collect PII without explicit authorization. VPN provider shall not send PII outside of the endpoint at all. * Test: Packet capture during typical hour of use * Result: No PII is sent * Output: Packet capture * Reference: TR-DMIN * Objective: Data minimization * Preparation: Packet capture during typical hour of use and document all data sent to the VPN provider * Activities: Review the documentation of the packet capture for any form of PII * Verdict: There is no PII collected => PASS, otherwise FAIL * Evidence: Packet capture #### 5.2.X.x **MI-NPII-3**: Loading