Minimization - Sanitation For Statistics, v1.0

Defines privacy requirements related to the deletion of sensitive information after calculation for statistical purposes.

Assessment Step

1
Minimization - Sanitation For Statistics (Minimization-SanitationForStatistics)
If the information is collected for statistical purposes, does the organization delete the sensitive information after the statistics have been calculated and verified?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) that support the assessor's response to this assessment step.
Parameter
Information Typesrequired
ENUM_MULTI : Select the type(s) of sensitive information that apply.
  • PII
  • PHI
  • III
  • IIHI
  • Other

Conformance Criteria (1)

C-1
If the information is collected for statistical purposes, delete the personal information after the statistics have been calculated and verified.
Citation
ACM
Minimization