PT-3(1)

  • Requirement

    Attach data tags containing the following purposes to [Assignment: organization-defined elements of personally identifiable information]: [Assignment: organization-defined processing purposes].

  • Discussion

    Data tags support the tracking of processing purposes by conveying the purposes along with the relevant elements of personally identifiable information throughout the system. By conveying the processing purposes in a data tag along with the personally identifiable information as the information transits a system, a system owner or operator can identify whether a change in processing would be compatible with the identified and documented purposes. Data tags may also support the use of automated tools.

More Info

  • Title

    Personally Identifiable Information Processing Purposes | Data Tagging
  • Family

    PII Processing and Transparency
  • NIST 800-53B Baseline(s)

    • Related NIST 800-53 ID

      CA-6;CM-12;PM-5;PM-22;SC-16;SC-43;SI-10;SI-15;SI-19

    NIST 800-53A Assessment Guidance

    CMMC Training

    Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!