risk
Excessive surveillance, appropriation and induced disclosure
Pervasive monitoring beyond stated purpose (behavioral analytics, always-on telemetry, employee monitoring), using identity/data for organizational benefit without consent, and coercing individuals to over-share — causing chilling effects and loss of autonomy.
Record JSON · Open in map · Data retrieval guide
Catalog revision: f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e. A connection does not establish full coverage.
Attributes
- category
- privacy
- domain
- Data Protection & Privacy
- taxonomy
- nist-privacy-risk
- nist-ai-rmf-risk
- inherent_rating
- medium
Details
- risk_id
- data-surveillance-appropriation
- category
- privacy
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- nist-privacy-risk
- nist-ai-rmf-risk
Source
No record-specific source URL is provided.
Connections
- UC-DATA-06 — Provide data subjects access to their personal data mitigates Excessive surveillance, appropriation and induced disclosure
- strength
- related
- rationale
- UC-DATA-03 — Limit personal-data use to stated purposes and minimum necessary mitigates Excessive surveillance, appropriation and induced disclosure
- strength
- related
- rationale
- Restricting use/disclosure to documented purposes limits monitoring and appropriation of data beyond its stated purpose.