CCI-003479

The organization defines the frequency on which it will request the individual, or individual's authorized representative, revalidate that personally identifiable information (PII) collected is still accurate.

Implementation Guidance

The organization being inspected/assessed defines and documents the frequency on which it will request the individual, or individual's authorized representative, revalidate that PII collected is still accurate. The frequency should be as often as is necessary to ensure the PII is accurate, relevant, timely, and complete; commensurate with the impact of the determination to an individual's rights, benefits, or privileges as determined by the system owner in consultation with the organization's privacy office. DoD has determined the frequency is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented frequency to ensure the organization being inspected/assessed defines and documents the frequency on which it will request the individual, or individual's authorized representative, revalidate that PII collected is still accurate. DoD has determined the frequency is not appropriate to define at the Enterprise level.

Compelling Evidence

Supply documentation that lists the frequency of when PII will be revalidated

The controls below (if any) were marked by NIST as being related to CCI-003479.