SI-18.2 ยท Data Tags

Control Description

Employ data tags to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Enhancement
Control Statement
The control requirements

Employ data tags to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.

Supplemental Guidance

Data tagging personally identifiable information includes tags that note processing permissions, authority to process, de-identification, impact level, information life cycle stage, and retention or last updated dates. Employing data tags for personally identifiable information can support the use of automation tools to correct or delete relevant personally identifiable information.

Related NIST Controls
Other NIST 800-53 controls related to this one