PM-25: Minimization of Personally Identifiable Information Used in Testing, Training, and Research

policies that address the use of personally identifiable information for internal testing are developed and documented;

policies that address the use of personally identifiable information for internal training are developed and documented;

policies that address the use of personally identifiable information for internal research are developed and documented;

procedures that address the use of personally identifiable information for internal testing are developed and documented;

procedures that address the use of personally identifiable information for internal training are developed and documented;

procedures that address the use of personally identifiable information for internal research are developed and documented;

policies that address the use of personally identifiable information for internal testing, are implemented;

policies that address the use of personally identifiable information for training are implemented;

policies that address the use of personally identifiable information for research are implemented;

procedures that address the use of personally identifiable information for internal testing are implemented;

procedures that address the use of personally identifiable information for training are implemented;

procedures that address the use of personally identifiable information for research are implemented;

the amount of personally identifiable information used for internal testing purposes is limited or minimized;

the amount of personally identifiable information used for internal training purposes is limited or minimized;

the amount of personally identifiable information used for internal research purposes is limited or minimized;

the required use of personally identifiable information for internal testing is authorized;

the required use of personally identifiable information for internal training is authorized;

the required use of personally identifiable information for internal research is authorized;

policies are reviewed frequency ;

policies are updated frequency ;

procedures are reviewed frequency ;

procedures are updated frequency .