{ "$TMF_VERSION": "1.4", "PublicationDateTime": "2021-04-26T00:00:00.000Z", "Description": "Profile of requirements corresponding to NIST Special Publication 800-53 r4, Privacy Control DM-1: Minimization of Personally Identifiable Information.", "Keywords": [ "800-53", "Data Minimization", "Minimization", "NIST", "Personally Identifiable Information", "Privacy", "Retention" ], "Issuer": { "Identifier": "https://trustmarkinitiative.org/", "PrimaryContact": { "Email": "help@trustmarkinitiative.org", "Telephone": "555-555-5555", "Kind": "PRIMARY", "WebsiteURL": "https://trustmarkinitiative.org/", "Responder": "" }, "Name": "TMI" }, "Sources": [{ "Identifier": "SP800-53R4", "Reference": "NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology, April 2013 (Includes updates as of 01-15-2014). Available at http://dx.doi.org/10.6028/NIST.SP.800-53r4<\/a>.", "$id": "source-2112165102" }], "Name": "NIST SP 800-53 r4 Privacy Control DM-1: Minimization of Personally Identifiable Information", "TrustExpression": "TD_ref1 and TD_ref2 and TD_ref3 and TD_ref4 and TD_ref5 and TD_ref6", "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tips/nist-sp-800-53-r4-privacy-control-dm-1_-minimization-of-personally-identifiable-information/4/", "Version": "4", "References": {"TrustmarkDefinitionRequirements": [ { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---identification-of-minimum-relevant-pii-elements/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization identifies the minimum personally identifiable information (PII) elements that are relevant and necessary to accomplish the legally authorized purpose of collection.", "Number": 1, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---identification-of-minimum-relevant-pii-elements/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization identifies the minimum personally identifiable information (PII) elements that are relevant and necessary to accomplish the legally authorized purpose of collection.", "Number": 1, "Version": "1.0", "Name": "Privacy - Minimization of Personally Identifiable Information - Identification of Minimum Relevant PII Elements" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Privacy - Minimization of Personally Identifiable Information - Identification of Minimum Relevant PII Elements", "$id": "TD_ref1" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---regular-reviews-of-pii-holdings-for-compliance-with-notice/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization establishes and follows a schedule for regularly reviewing PII holdings at least annually to ensure that only PII identified in the notice is collected and retained.", "Number": 2, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---regular-reviews-of-pii-holdings-for-compliance-with-notice/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization establishes and follows a schedule for regularly reviewing PII holdings at least annually to ensure that only PII identified in the notice is collected and retained.", "Number": 2, "Version": "1.0", "Name": "Privacy - Minimization of Personally Identifiable Information - Regular Reviews of PII Holdings For Compliance With Notice" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Privacy - Minimization of Personally Identifiable Information - Regular Reviews of PII Holdings For Compliance With Notice", "$id": "TD_ref2" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---retention-of-pii-conforms-with-notice-and-consent/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization limits the retention of PII to the minimum elements identified for the purposes described in the notice and for which the individual has provided consent.", "Number": 3, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---retention-of-pii-conforms-with-notice-and-consent/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization limits the retention of PII to the minimum elements identified for the purposes described in the notice and for which the individual has provided consent.", "Number": 3, "Version": "1.0", "Name": "Privacy - Minimization of Personally Identifiable Information - Retention of PII Conforms With Notice and Consent" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Privacy - Minimization of Personally Identifiable Information - Retention of PII Conforms With Notice and Consent", "$id": "TD_ref3" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---collected-pii-conforms-with-notice-and-consent/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization limits the collection of PII to the minimum elements identified for the purposes described in the notice and for which the individual has provided consent.", "Number": 4, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---collected-pii-conforms-with-notice-and-consent/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization limits the collection of PII to the minimum elements identified for the purposes described in the notice and for which the individual has provided consent.", "Number": 4, "Version": "1.0", "Name": "Privacy - Minimization of Personally Identifiable Information - Collected PII Conforms With Notice and Consent" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Privacy - Minimization of Personally Identifiable Information - Collected PII Conforms With Notice and Consent", "$id": "TD_ref4" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---regular-reviews-of-pii-holdings-for-continued-need/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization establishes and follows a schedule for regularly reviewing PII holdings at least annually to ensure that the PII continues to be necessary to accomplish the legally authorized purpose.", "Number": 5, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---regular-reviews-of-pii-holdings-for-continued-need/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization establishes and follows a schedule for regularly reviewing PII holdings at least annually to ensure that the PII continues to be necessary to accomplish the legally authorized purpose.", "Number": 5, "Version": "1.0", "Name": "Privacy - Minimization of Personally Identifiable Information - Regular Reviews of PII Holdings For Continued Need" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Privacy - Minimization of Personally Identifiable Information - Regular Reviews of PII Holdings For Continued Need", "$id": "TD_ref5" }, { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---initial-evaluation-of-pii-holdings/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization conducts an initial evaluation of PII holdings to ensure that only PII identified in the notice is collected and retained.", "Number": 6, "Version": "1.0", "TrustmarkDefinitionReference": { "Identifier": "https://artifacts.trustmarkinitiative.org/lib/tds/privacy---minimization-of-personally-identifiable-information---initial-evaluation-of-pii-holdings/1.0/", "Description": "Defines conformance and assessment criteria for verifying that an organization conducts an initial evaluation of PII holdings to ensure that only PII identified in the notice is collected and retained.", "Number": 6, "Version": "1.0", "Name": "Privacy - Minimization of Personally Identifiable Information - Initial Evaluation of PII Holdings" }, "$Type": "TrustmarkDefinitionRequirement", "Name": "Privacy - Minimization of Personally Identifiable Information - Initial Evaluation of PII Holdings", "$id": "TD_ref6" } ]}, "Primary": "false", "LegalNotice": "This document and the information contained herein is provided on an \"AS IS\" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.", "$Type": "TrustInteroperabilityProfile" }