+SI-19(03) Release

SI-19(03) Release

Control

Remove personally identifiable information elements from a dataset prior to its release if those elements in the dataset do not need to be part of the data release.

Discussion

Prior to releasing a dataset, a data custodian considers the intended uses of the dataset and determines if it is necessary to release personally identifiable information. If the personally identifiable information is not necessary, the information can be removed using de-identification techniques.

Assessment Objective

personally identifiable information elements are removed from a dataset prior to its release if those elements in the dataset do not need to be part of the data release.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures personally identifiable information processing policy de-identification procedures procedures for minimizing the release of personally identifiable information system configuration data release mechanisms system security plan privacy plan privacy impact assessment privacy risk assessment documentation other relevant documents or records

Interview

Organizational personnel responsible for de-identifying the dataset organizational personnel with information security and privacy responsibilities

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
is blocked by SI-19(03) Release – Assessment Procedure
is blocked by Sensitive / Regulated Data Release Sanitization