An error occurred:

CCIs

Number Definition Status Related
CCI-003511 The organization develops procedures that minimize the use of personally identifiable information (PII) for training. Draft DM-3
CCI-003512 The organization develops procedures that minimize the use of personally identifiable information (PII) for research. Draft DM-3
CCI-003513 The organization implements controls to protect personally identifiable information (PII) used for testing. Draft DM-3
CCI-003514 The organization implements controls to protect personally identifiable information (PII) used for training. Draft DM-3
CCI-003515 The organization implements controls to protect personally identifiable information (PII) used for research. Draft DM-3
CCI-003516 The organization, where feasible, uses techniques to minimize the risk to privacy of using personally identifiable information (PII) for research. Draft DM-3(1)
CCI-003517 The organization, where feasible, uses techniques to minimize the risk to privacy of using personally identifiable information (PII) for testing. Draft DM-3(1)
CCI-003518 The organization, where feasible, uses techniques to minimize the risk to privacy of using personally identifiable information (PII) for training. Draft DM-3(1)
CCI-003519 The organization provides means, where feasible and appropriate, for individuals to authorize the collection of personally identifiable information (PII) prior to its collection. Draft IP-1
CCI-003520 The organization provides means, where feasible and appropriate, for individuals to authorize the use of personally identifiable information (PII) prior to its collection. Draft IP-1
CCI-003521 The organization provides means, where feasible and appropriate, for individuals to authorize the maintaining of personally identifiable information (PII) prior to its collection. Draft IP-1
CCI-003522 The organization provides means, where feasible and appropriate, for individuals to authorize sharing of personally identifiable information (PII) prior to its collection. Draft IP-1
CCI-003523 The organization provides appropriate means for individuals to understand the consequences of decisions to approve or decline the authorization of the collection of personally identifiable information (PII). Draft IP-1
CCI-003524 The organization provides appropriate means for individuals to understand the consequences of decisions to approve or decline the authorization of the use of personally identifiable information (PII). Draft IP-1
CCI-003525 The organization provides appropriate means for individuals to understand the consequences of decisions to approve or decline the authorization of the dissemination of personally identifiable information (PII). Draft IP-1
CCI-003526 The organization provides appropriate means for individuals to understand the consequences of decisions to approve or decline the authorization of the retention of personally identifiable information (PII). Draft IP-1
CCI-003527 The organization obtains consent, where feasible and appropriate, from individuals prior to any new uses or disclosure of previously collected personally identifiable information (PII). Draft IP-1
CCI-003528 The organization ensures that individuals are aware of all uses of personally identifiable information (PII) not initially described in the public notice that was in effect at the time the organization collected the PII. Draft IP-1
CCI-003529 The organization ensures that individuals, where feasible, consent to all uses of personally identifiable information (PII) not initially described in the public notice that was in effect at the time the organization collected the PII. Draft IP-1
CCI-003530 The organization implements mechanisms to support itemized or tiered consent for specific uses of personally identifiable information (PII) data. Draft IP-1(1)
CCI-003531 The organization provides individuals the ability to have access to their personally identifiable information (PII) maintained in its system(s) of records. Draft IP-2
CCI-003532 The organization publishes rules and regulations governing how individuals may request access to records maintained in a Privacy Act system of records. Draft IP-2
CCI-003533 The organization publishes regulations governing how individuals may request access to records maintained in a Privacy Act system of records. Deprecated IP-2
CCI-003534 The organization publishes access procedures for Privacy Act systems of records in System of Records Notices (SORNs). Draft IP-2
CCI-003535 The organization adheres to Privacy Act requirements for the proper processing of Privacy Act requests. Draft IP-2
CCI-003536 The organization adheres to OMB policies and guidance for the proper processing of Privacy Act requests. Draft IP-2
CCI-003537 The organization provides a process for individuals to have inaccurate personally identifiable information (PII) maintained by the organization corrected or amended, as appropriate. Draft IP-3
CCI-003538 The organization establishes a process for disseminating corrections or amendments of the personally identifiable information (PII) to other authorized users of the PII, such as external information-sharing partners. Draft IP-3
CCI-003539 The organization establishes a process, where feasible and appropriate, to notify affected individuals that their personally identifiable information (PII) information has been corrected or amended. Draft IP-3
CCI-003540 The organization implements a process for receiving complaints, concerns, or questions from individuals about the organizational privacy practices. Draft IP-4