CCI-003512

The organization develops procedures that minimize the use of personally identifiable information (PII) for research.

Implementation Guidance

The organization being inspected/assessed develops and documents procedures that minimize the use of PII for research.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented procedures to ensure the organization being inspected/assessed develops procedures that minimize the use of PII for research.

Compelling Evidence

1.) Site must produce a signed document which describes site's procedures to minimize the use of PII for research. 2.) Reviewer will verify that the documentation exists. 3.) Reviewer will verify that the documentation describes site's procedures to minimize the use of PII for research. 4.) Reviewer must validate that the site implements and follows these procedures.

The controls below (if any) were marked by NIST as being related to CCI-003512.