ComplianceNIST 800-53 control
NIST-PM-20 Dissemination of Privacy Program Information
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- PM Program Management
- Control
- PM-20
Control statement
Maintain a central resource webpage on the organization’s principal public website that serves as a central source of information about the organization’s privacy program and that:
a. Ensures that the public has access to information about organizational privacy activities and can communicate with its senior agency official for privacy;
b. Ensures that organizational privacy practices and reports are publicly available; and
c. Employs publicly facing email addresses and/or phone lines to enable the public to provide feedback and/or direct questions to privacy offices regarding privacy practices.
Discussion
For federal agencies, the webpage is located at www.[agency].gov/privacy. Federal agencies include public privacy impact assessments, system of records notices, computer matching notices and agreements, [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) exemption and implementation rules, privacy reports, privacy policies, instructions for individuals making an access or amendment request, email addresses for questions/complaints, blogs, and periodic publications.
Related
Related control · Compliance (6)
- NIST-AC-3 Access Enforcement NIST 800-53 control
- NIST-PM-19 Privacy Program Leadership Role NIST 800-53 control
- NIST-PT-5 Privacy Notice NIST 800-53 control
- NIST-PT-6 System of Records Notice NIST 800-53 control
- NIST-PT-7 Specific Categories of Personally Identifiable Information NIST 800-53 control
- NIST-RA-8 Privacy Impact Assessments NIST 800-53 control
Referenced by Compliance · enhancement of (1)
- NIST-PM-20(1) Privacy Policies on Websites, Applications, and Digital Services NIST 800-53 enhancement
Referenced by Compliance · has member (1)
- NIST-PM Program Management NIST 800-53 family
Referenced by Compliance · related control (4)
- NIST-AC-3(14) Individual Access NIST 800-53 enhancement
- NIST-PM-19 Privacy Program Leadership Role NIST 800-53 control
- NIST-PT-5 Privacy Notice NIST 800-53 control
- NIST-PT-6 System of Records Notice NIST 800-53 control