STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.
← All Controls

PT-8

PII Processing and TransparencyRev 5organization

Computer Matching Requirements

Baselines:Privacy

Control Statement

When a system or organization processes information for the purpose of conducting a matching program:

Supplemental Guidance

The [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) establishes requirements for federal and non-federal agencies if they engage in a matching program. In general, a matching program is a computerized comparison of records from two or more automated [PRIVACT](#18e71fec-c6fd-475a-925a-5d8495cf8455) systems of records or an automated system of records and automated records maintained by a non-federal agency (or agent thereof). A matching program either pertains to federal benefit programs or federal personnel or payroll records. A federal benefit match is performed to determine or verify eligibility for payments under federal benefit programs or to recoup payments or delinquent debts under federal benefit programs. A matching program involves not just the matching activity itself but also the investigative follow-up and ultimate action, if any.

Related Controls (1)

PM-24

CCI Identifiers (5)

CCI-004598When a system or organization processes information for the purpose of conducting a matching program: obtain approval from the Data Integrity Board to conduct the matching program.CCI-004599When a system or organization processes information for the purpose of conducting a matching program: develop and enter into a computer matching agreement.CCI-004600When a system or organization processes information for the purpose of conducting a matching program: publish a matching notice in the Federal Register.CCI-004601When a system or organization processes information for the purpose of conducting a matching program: independently verify the information produced by the matching program before taking adverse action against an individual, if required.CCI-004602When a system or organization processes information for the purpose of conducting a matching program: provide individuals with notice and an opportunity to contest the findings before taking adverse action against an individual.

Linked STIG Checks (0)

No STIG checks reference this control.