CCI-004583

For systems that process information that will be maintained in a Privacy Act system of records: publish system of records notices in the Federal Register.

Implementation Guidance

Determine if system of records notices are published in the Federal Register for systems that process information that will be maintained in a Privacy Act system of records.

Validation Procedures

Examine: [SELECT FROM: Personally identifiable information processing and transparency policy and procedures; privacy notice; Privacy Act system of records; Federal Register notices; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personally identifiable information processing and transparency responsibilities; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Organizational processes for Privacy Act system of records maintenance].

The controls below (if any) were marked by NIST as being related to CCI-004583.