Defines the processing of personally identifiable information to only that which is compatible with the identified purpose(s).
No STIG checks reference this CCI.