STIGhub
STIGs
RMF Controls
Compare
← All Controls
DM-1
Data Minimization and Retention
Rev 4
Minimization of Personally Identifiable Information
CCI Identifiers (9)
CCI-003494
The organization follows a schedule for regularly reviewing the personally identifiable information (PII) holdings on an organization-defined frequency to ensure the PII continues to be necessary to accomplish the legally authorized purpose.
CCI-003491
The organization establishes a schedule for regularly reviewing the personally identifiable information (PII) holdings on an organization-defined frequency to ensure that only PII identified in the notice is collected and retained.
CCI-003492
The organization follows a schedule for regularly reviewing the personally identifiable information (PII) holdings on an organization-defined frequency to ensure that only PII identified in the notice is collected and retained.
CCI-003493
The organization establishes a schedule for regularly reviewing the personally identifiable information (PII) holdings on an organization-defined frequency to ensure the PII continues to be necessary to accomplish the legally authorized purpose.
CCI-003486
The organization identifies the minimum personally identifiable information (PII) elements that are relevant and necessary to accomplish the legally authorized purpose of collection.
CCI-003487
The organization limits the collection and retention of personally identifiable information (PII) to the minimum elements identified for the purposes described in the published privacy notice.
CCI-003488
The organization limits the collection and retention of personally identifiable information (PII) to the minimum elements identified for the purposes which the individual has provided consent.
CCI-003489
The organization defines the frequency, minimally annually, for conducting reviews of its personally identifiable information (PII) holdings.
CCI-003490
The organization conducts an initial evaluation of personally identifiable information (PII) holdings.
Linked STIG Checks (0)
No STIG checks reference this control.