CCI-003487

The organization limits the collection and retention of personally identifiable information (PII) to the minimum elements identified for the purposes described in the published privacy notice.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003487.