---

id: "PT-02(01)" title: "Data Tagging" family: "PT" family_name: "PII Processing and Transparency" sort_id: "pt-02.01" priority: "P2" implementation_level: "system" parent: "PT-02" enhancement: True

---

Statement

Attach data tags containing {{ insert: param, pt-02.01_odp.01 }} to {{ insert: param, pt-02.01_odp.02 }}.

Guidance

Data tags support the tracking and enforcement of authorized processing by conveying the types of processing that are authorized along with the relevant elements of personally identifiable information throughout the system. Data tags may also support the use of automated tools.

Assessment Objective

data tags containing {{ insert: param, pt-02.01_odp.01 }} are attached to {{ insert: param, pt-02.01_odp.02 }}.

Personally identifiable information processing and transparency policy and procedures including procedures addressing data tagging

data tag definitions

documented requirements for use and monitoring of data tagging

data extracts with corresponding data tags

privacy plan

other relevant documents or records

Organizational personnel with personally identifiable information processing and transparency responsibilities

organizational personnel with information security and privacy responsibilities

Organizational processes for authorizing the processing of personally identifiable information

organizational processes for data tagging

mechanisms for applying and monitoring data tagging

mechanisms supporting and/or implementing the restriction of personally identifiable information processing