NIST 800-53 rev.5/Personally Identifiable Information Processing and Transparency/607 of 1011
PT-05Privacy Notice
Control family: Personally Identifiable Information Processing and Transparency
Control description
Provide notice to individuals about the processing of personally identifiable information that:
a. Is available to individuals upon first interacting with an organization, and subsequently at [Assignment: organization-defined frequency];
b. Is clear and easy-to-understand, expressing information about personally identifiable information processing in plain language;
c. Identifies the authority that authorizes the processing of personally identifiable information;
d. Identifies the purposes for which personally identifiable information is to be processed; and
e. Includes [Assignment: organization-defined information].