PT-3: Personally Identifiable Information Processing Purposes
An OSCAL Control
-
-
processing
the processing of personally identifiable information to be restricted is defined;
-
requirements
requirements for changing the processing of personally identifiable information are defined;
-
purpose(s)
the purpose(s) for processing personally identifiable information is/are defined;
-
mechanisms
mechanisms to be implemented for ensuring any changes in the processing of personally identifiable information are made in accordance with requirements are defined;
-