ComplianceNIST 800-53 control

NIST-PM-20 Dissemination of Privacy Program Information

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
PM Program Management
Control
PM-20

Control statement

Maintain a central resource webpage on the organization’s principal public website that serves as a central source of information about the organization’s privacy program and that: a. Ensures that the public has access to information about organizational privacy activities and can communicate with its senior agency official for privacy; b. Ensures that organizational privacy practices and reports are publicly available; and c. Employs publicly facing email addresses and/or phone lines to enable the public to provide feedback and/or direct questions to privacy offices regarding privacy practices.

Discussion

For federal agencies, the webpage is located at www.[agency].gov/privacy. Federal agencies include public privacy impact assessments, system of records notices, computer matching notices and agreements, [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) exemption and implementation rules, privacy reports, privacy policies, instructions for individuals making an access or amendment request, email addresses for questions/complaints, blogs, and periodic publications.

Related

Related control · Compliance (6)

  • NIST-AC-3 Access Enforcement NIST 800-53 control
  • NIST-PM-19 Privacy Program Leadership Role NIST 800-53 control
  • NIST-PT-5 Privacy Notice NIST 800-53 control
  • NIST-PT-6 System of Records Notice NIST 800-53 control
  • NIST-PT-7 Specific Categories of Personally Identifiable Information NIST 800-53 control
  • NIST-RA-8 Privacy Impact Assessments NIST 800-53 control

Referenced by Compliance · enhancement of (1)

  • NIST-PM-20(1) Privacy Policies on Websites, Applications, and Digital Services NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-PM Program Management NIST 800-53 family

Referenced by Compliance · related control (4)

  • NIST-AC-3(14) Individual Access NIST 800-53 enhancement
  • NIST-PM-19 Privacy Program Leadership Role NIST 800-53 control
  • NIST-PT-5 Privacy Notice NIST 800-53 control
  • NIST-PT-6 System of Records Notice NIST 800-53 control