ComplianceNIST 800-53 enhancement
NIST-PT-3(1) Data Tagging
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- PT Personally Identifiable Information Processing and Transparency
- Control
- PT-3(1)
Control statement
Attach data tags containing the following purposes to [Assignment: elements of personally identifiable information]: [Assignment: processing purposes].
Discussion
Data tags support the tracking of processing purposes by conveying the purposes along with the relevant elements of personally identifiable information throughout the system. By conveying the processing purposes in a data tag along with the personally identifiable information as the information transits a system, a system owner or operator can identify whether a change in processing would be compatible with the identified and documented purposes. Data tags may also support the use of automated tools.
Related
Enhancement of · Compliance (1)
- NIST-PT-3 Personally Identifiable Information Processing Purposes NIST 800-53 control
Related control · Compliance (9)
- NIST-CA-6 Authorization NIST 800-53 control
- NIST-CM-12 Information Location NIST 800-53 control
- NIST-PM-22 Personally Identifiable Information Quality Management NIST 800-53 control
- NIST-PM-5 System Inventory NIST 800-53 control
- NIST-SC-16 Transmission of Security and Privacy Attributes NIST 800-53 control
- NIST-SC-43 Usage Restrictions NIST 800-53 control
- NIST-SI-10 Information Input Validation NIST 800-53 control
- NIST-SI-15 Information Output Filtering NIST 800-53 control
- NIST-SI-19 De-identification NIST 800-53 control