Commit df340324 authored by Marvin Petzolt's avatar Marvin Petzolt Committed by Aki Braun
Browse files

[Nord 10] Reformulated evidence from proofing why it is not personal data to... 

[Nord 10] Reformulated evidence from proofing why it is not personal data to writing why personal data is requried
parent 2e8920ee

clauses/5.Requirements.md

+1 −1
Original line number Diff line number Diff line
@@ -788,7 +788,7 @@ The VPN shall minimize the required Personal Data for use of the product, collec 
* Preparation: Follow the instructions to use the product and start a VPN connection, selecting the options that require the least Personal Data, recording all data entered

* Activities: Examine the data entered looking for Personal Data. Review the manufacturer's provided justification for the necessity of this data in relation to providing the service, processing payment or managing the subscription.

* Verdict: If there is any excessive Personal Data recorded or Personal Data recorded without a justified, documented operational reason essential for the delivery of the service or payment processing=> FAIL, otherwise => PASS

* Evidence: The record of data entered with a short description of each part accounting for why it is not Personal Data and the record of personal data entered and for which reason this data is needed.

* Evidence: The record of data entered with a short description indicating whether the particular data element alone or in combination with other data elements allows for singling out the individual in accordance with the definition of personal data under the applicable law. Where this is the case, the reason why the data element is required should also be documented.



#### 5.2.12.5 MI-NPER-4: No Personal Data stored on remote data processing systems