V-288272

Discussion

Data tags support the tracking of processing purposes by conveying the purposes along with the relevant elements of PII throughout the system. By conveying the processing purposes in a data tag along with the personally identifiable information as the information transits a system, a system owner or operator can identify whether a change in processing would be compatible with the identified and documented purposes. Data tags may also support the use of automated tools. This requirement pertains to Zero Trust.

Check Content

Review the application documentation and deployed configuration to determine whether the application attaches data tags containing organization-defined processing purposes to organization-defined elements of PII.

If the application does not attach data tags containing organization-defined processing purposes to organization-defined elements of PII.