PT-2(1): Data Tagging
PF v1.0 References:
Baselines:
(Not part of any baseline)
Control is new to this version of the control set.
Control Statement
Attach data tags containing [Assignment: organization-defined permissible processing] to [Assignment: organization-defined elements of personally identifiable information].
Supplemental Guidance
Data tags support the tracking and enforcement of authorized processing by conveying the types of processing that are authorized along with the relevant elements of personally identifiable information throughout the system. Data tags may also support the use of automated tools.