Matching Hu-aDPS-io

URI: MP-Hu-aDPS-io

Description: Finds a Stakeholder operating a Process that is using Data relating to a Human data subject who may be a child via a controlling Service, where the subject does not operate either the Process or the controlling Service.

Root Pattern: R-HuDPS

R-HuDPS

Finds a Stakeholder operating a Process that is using Data relating to a Human data subject via a controlling Service.

(empty)

P.GDPR.Hu-aDPS-io.8

Extra measures are needed for Process to use Data related to DataSubject who may be a child: the legal basis for this data processing under the GDPR is consent, but the subject DataSubject may be a child, so additional measures are necessary for their consent to be valid. If DataSubject cannot be a child, then change them from type Human to type Adult to eliminate this threat.

Matching Hu-aDPS-io

R-HuDPS

Construction Patterns (0)

Threat Patterns (1)

P.GDPR.Hu-aDPS-io.8