ComplianceNIST 800-53 enhancement
NIST-PT-4(3) Revocation
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- PT Personally Identifiable Information Processing and Transparency
- Control
- PT-4(3)
Control statement
Implement [Assignment: tools or mechanisms] for individuals to revoke consent to the processing of their personally identifiable information.
Discussion
Revocation of consent enables individuals to exercise control over their initial consent decision when circumstances change. Organizations consider usability factors in enabling easy-to-use revocation capabilities.
Related
Enhancement of · Compliance (1)
- NIST-PT-4 Consent NIST 800-53 control
Related control · Compliance (1)
- NIST-PT-2 Authority to Process Personally Identifiable Information NIST 800-53 control