SI-12.1: Limit Personally Identifiable Information Elements

System and information integrity policy

system and information integrity procedures

personally identifiable information processing policy

personally identifiable information processing procedures

records retention and disposition policy

records retention and disposition procedures

federal laws, Executive Orders, directives, policies, regulations, standards, and operational requirements applicable to limiting personally identifiable information elements

personally identifiable information inventory

system audit records

audit findings

system security plan

privacy plan

privacy program plan

privacy impact assessment

privacy risk assessment documentation

data mapping documentation

other relevant documents or records

Organizational personnel with information and records management, retention, and disposition responsibilities

organizational personnel with security and privacy responsibilities

network administrators

Organizational processes for information management and retention (including limiting personally identifiable information processing)

automated mechanisms supporting and/or implementing limits to personally identifiable information processing