CCI-003498

The organization retains each collection of personally identifiable information (PII) for the organization-defined time period to fulfill the purpose(s) identified in the published privacy notice or as required by law.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-003498.