Navigate

DM-1 (1)

DM-1 (1): Locate/Remove/Redact/Anonymize PII

The organization, where feasible and within the limits of technology, locates and removes/redacts specified PII and/or uses anonymization and de-identification techniques to permit use of the retained information while reducing its sensitivity and reducing the risk resulting from disclosure.

Supplemental

NIST Special Publication 800-122 provides guidance on anonymization.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to DM-1 (1).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of DM-1 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to DM-1 (1).

CCI	Definition
CCI-003495	The organization, where feasible and within the limits of technology, locates and removes/redacts specified personally identifiable information (PII).
CCI-003496	The organization, where feasible and within the limits of technology, uses anonymization and de-identification techniques to permit use of the retained Privacy Act information while reducing its sensitivity and reducing the risk resulting from disclosure.