Matching Hu-aDPoS-i

URI: MP-Hu-aDPoS-i

Description: Finds Stakeholder operating a Process that is using Data relating to a Human data subject who may be a child via a controlling Service, where the subject operates the Service but not the Process.

Root Pattern: R-HuDPoS

R-HuDPoS

Finds a Stakeholder operating a Process that is using Data relating to a Human data subject via a controlling Service, where the subject operates the Service.

(empty)

P.GDPR.Hu-aDPoS-i.8

Extra measures are needed for Process to use Data related to DataSubject who may be a child: the legal basis for this data processing under the GDPR is consent, but the subject DataSubject may be a child, so additional measures are necessary for their consent to be valid. If DataSubject cannot be a child, then change them from type Human to type Adult to eliminate this threat.

Matching Hu-aDPoS-i

R-HuDPoS

Construction Patterns (0)

Threat Patterns (1)

P.GDPR.Hu-aDPoS-i.8