CCI-003530

The organization implements mechanisms to support itemized or tiered consent for specific uses of personally identifiable information (PII) data.

Implementation Guidance

The organization implements mechanisms to support itemized or tiered consent for specific uses of PII data.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of the itemized or tiered consent methods used by the organization to ensure the organization being inspected/assessed provides individuals, where feasible, consent to each tier of use requested.

Compelling Evidence

Supply documentation for mechanisms to support itemized or tiered consent for specific uses of PII data.

The controls below (if any) were marked by NIST as being related to CCI-003530.