NIST 800-53 Rev. 5

PT-2(1): Authority to Process Personally Identifiable Information | Data Tagging

Control Text:

Attach data tags containing [Assignment: organization-defined authorized processing] to [Assignment: organization-defined elements of personally identifiable information].

Data tags support the tracking and enforcement of authorized processing by conveying the types of processing that are authorized along with the relevant elements of personally identifiable information throughout the system. Data tags may also support the use of automated tools.

Related Controls