CCI-003480

On an organization-defined frequency, the organization requests the individual, or individual's authorized representative, revalidate that personally identifiable information (PII) collected is still accurate.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to request the individual, or individual's authorized representative, revalidate that PII collected is still accurate, as frequently as is necessary to ensure the PII is accurate, relevant, timely, and complete; commensurate with the impact of the determination to an individual's rights, benefits, or privileges as determined by the system owner in consultation with the organization's privacy office.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed requests the individual, or individual's authorized representative, revalidate that PII collected is still accurate. as frequently as is necessary to ensure the PII is accurate, relevant, timely, and complete; commensurate with the impact of the determination to an individual's rights, benefits, or privileges as determined by the system owner in consultation with the organization's privacy office.

Compelling Evidence

Supply PII documentation, reference section pertaining to PII revalidation process and reference the frequency or timeline listed that PII is still accurate, relevant, timely, and complete. Supply documentation that references individual(s) or authorized individual(s) are being contacted within the frequency stated to confirm that collected PII is accurate, relevant, timely, and complete.

The controls below (if any) were marked by NIST as being related to CCI-003480.