ComplianceNIST 800-53 control

NIST-PT-7 Specific Categories of Personally Identifiable Information

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
PT Personally Identifiable Information Processing and Transparency
Control
PT-7

Control statement

Apply [Assignment: processing conditions] for specific categories of personally identifiable information.

Discussion

Organizations apply any conditions or protections that may be necessary for specific categories of personally identifiable information. These conditions may be required by laws, executive orders, directives, regulations, policies, standards, or guidelines. The requirements may also come from the results of privacy risk assessments that factor in contextual changes that may result in an organizational determination that a particular category of personally identifiable information is particularly sensitive or raises particular privacy risks. Organizations consult with the senior agency official for privacy and legal counsel regarding any protections that may be necessary.

Related

Related control · Compliance (4)

  • NIST-IR-9 Information Spillage Response NIST 800-53 control
  • NIST-PT-2 Authority to Process Personally Identifiable Information NIST 800-53 control
  • NIST-PT-3 Personally Identifiable Information Processing Purposes NIST 800-53 control
  • NIST-RA-3 Risk Assessment NIST 800-53 control

Referenced by Compliance · enhancement of (2)

  • NIST-PT-7(1) Social Security Numbers NIST 800-53 enhancement
  • NIST-PT-7(2) First Amendment Information NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-PT Personally Identifiable Information Processing and Transparency NIST 800-53 family

Referenced by Compliance · related control (15)

  • NIST-AC-21 Information Sharing NIST 800-53 control
  • NIST-AC-3(9) Controlled Release NIST 800-53 enhancement
  • NIST-AU-16 Cross-organizational Audit Logging NIST 800-53 control
  • NIST-AU-2 Event Logging NIST 800-53 control
  • NIST-CA-3 Information Exchange NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-IA-4(1) Prohibit Account Identifiers as Public Identifiers NIST 800-53 enhancement
  • NIST-IR-8(1) Breaches NIST 800-53 enhancement
  • NIST-IR-9 Information Spillage Response NIST 800-53 control
  • NIST-PM-20 Dissemination of Privacy Program Information NIST 800-53 control
  • NIST-PM-23 Data Governance Body NIST 800-53 control
  • NIST-PM-31 Continuous Monitoring Strategy NIST 800-53 control
  • NIST-PT-3 Personally Identifiable Information Processing Purposes NIST 800-53 control
  • NIST-PT-5 Privacy Notice NIST 800-53 control
  • NIST-RA-3 Risk Assessment NIST 800-53 control