The organization describes, in its privacy notices, the purpose(s) for which personally identifiable information (PII) is shared.
No STIG checks reference this CCI.