ComplianceNIST 800-53 enhancement

NIST-PT-4(1) Tailored Consent

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
PT Personally Identifiable Information Processing and Transparency
Control
PT-4(1)

Control statement

Provide [Assignment: mechanisms] to allow individuals to tailor processing permissions to selected elements of personally identifiable information.

Discussion

While some processing may be necessary for the basic functionality of the product or service, other processing may not. In these circumstances, organizations allow individuals to select how specific personally identifiable information elements may be processed. More tailored consent may help reduce privacy risk, increase individual satisfaction, and avoid adverse behaviors, such as abandonment of the product or service.

Related

Enhancement of · Compliance (1)

Related control · Compliance (1)

  • NIST-PT-2 Authority to Process Personally Identifiable Information NIST 800-53 control