CCI-003491

The organization establishes a schedule for regularly reviewing the personally identifiable information (PII) holdings on an organization-defined frequency to ensure that only PII identified in the notice is collected and retained.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003491.