CCI-005023

Employ data tags to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.

Implementation Guidance

Determine if data tags are employed to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.

Validation Procedures

Examine: [SELECT FROM: System and information integrity policy; system and information integrity procedures; personally identifiable information processing policy; procedures addressing data tagging; personally identifiable information inventory; system audit records; audit findings; system security plan; privacy plan; privacy impact assessment; privacy risk assessment documentation; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel responsible for tagging data; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Data tagging mechanisms; automated mechanisms supporting and/or implementing data tagging].

The controls below (if any) were marked by NIST as being related to CCI-005023.