Back to all 93 controls
Annex A 5.34
Organizational
A.5.34 Privacy and protection of PII
Personal data is protected.
What good looks like
Privacy policy, DPIAs, data-subject rights process, lawful basis recorded.
Evidence an auditor will ask for
Privacy notice, DPIA library, ROPA, DSAR log.
Document template for this control
The Data Protection Policy template gives you auditor-ready wording that fulfils Annex A 5.34. Preview the full document before you download the editable version.