CCI-003540

The organization implements a process for receiving complaints, concerns, or questions from individuals about the organizational privacy practices.

Implementation Guidance

The organization being inspected/assessed documents and implements a process IAW DoD 5400.11-R and for receiving privacy-related complaints, grievances, concerns, or questions from individuals

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed implements a process IAW DoD 5400.11-R and OMB Memorandum M-08-09 for receiving complaints, grievances, concerns, or questions from individuals about: (1) organizational privacy process and procedural issues (consent, collection, and appropriate notice); (2) redress issues (non-Privacy Act inquiries seeking resolution of difficulties or concerns about privacy matters); (3) operational issues (inquiries regarding Privacy Act matters not including Privacy Act requests for access and/or corrections); and (4) a complaint or grievance against the organization or one of its employees concerning any right granted by DoD 5400.11-R.

Compelling Evidence

Supply documentation and reference procedure on how the organization implements a process for receiving complaints, concerns, or questions from individuals about the organizational privacy practices.

The controls below (if any) were marked by NIST as being related to CCI-003540.