id: "PT-03(01)" title: "Data Tagging" family: "PT" family_name: "PII Processing and Transparency" sort_id: "pt-03.01" priority: "P2" implementation_level: "system" parent: "PT-03" enhancement: True
Statement
Attach data tags containing the following purposes to {{ insert: param, pt-03.01_odp.02 }}: {{ insert: param, pt-03.01_odp.01 }}.
Guidance
Data tags support the tracking of processing purposes by conveying the purposes along with the relevant elements of personally identifiable information throughout the system. By conveying the processing purposes in a data tag along with the personally identifiable information as the information transits a system, a system owner or operator can identify whether a change in processing would be compatible with the identified and documented purposes. Data tags may also support the use of automated tools.
Assessment Objective
data tags containing {{ insert: param, pt-03.01_odp.01 }} are attached to {{ insert: param, pt-03.01_odp.02 }}.
Personally identifiable information processing and transparency policy and procedures
documented description of how data tags are used to identify personally identifiable information data elements and their authorized uses
data tag schema
data extracts with corresponding data tags
privacy plan
other relevant documents or records
Organizational personnel with personally identifiable information processing and transparency responsibilities
organizational personnel with data tagging responsibilities
organizational personnel with information security and privacy responsibilities
Organizational processes for authorizing the processing of personally identifiable information
mechanisms supporting and/or implementing data tagging