Skip to content

PT-3: Personally Identifiable Information Processing Purposes

An OSCAL Control

    • processing

      the processing of personally identifiable information to be restricted is defined;

    • requirements

      requirements for changing the processing of personally identifiable information are defined;

    • purpose(s)

      the purpose(s) for processing personally identifiable information is/are defined;

    • mechanisms

      mechanisms to be implemented for ensuring any changes in the processing of personally identifiable information are made in accordance with requirements are defined;