ComplianceNIST 800-53 enhancement
NIST-PT-4(1) Tailored Consent
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- PT Personally Identifiable Information Processing and Transparency
- Control
- PT-4(1)
Control statement
Provide [Assignment: mechanisms] to allow individuals to tailor processing permissions to selected elements of personally identifiable information.
Discussion
While some processing may be necessary for the basic functionality of the product or service, other processing may not. In these circumstances, organizations allow individuals to select how specific personally identifiable information elements may be processed. More tailored consent may help reduce privacy risk, increase individual satisfaction, and avoid adverse behaviors, such as abandonment of the product or service.
Related
Enhancement of · Compliance (1)
- NIST-PT-4 Consent NIST 800-53 control
Related control · Compliance (1)
- NIST-PT-2 Authority to Process Personally Identifiable Information NIST 800-53 control