id: "SI-18(05)" title: "Notice of Correction or Deletion" family: "SI" family_name: "System and Information Integrity" sort_id: "si-18.05" priority: "P1" implementation_level: "system" parent: "SI-18" enhancement: True
Statement
Notify {{ insert: param, si-18.05_odp }} and individuals that the personally identifiable information has been corrected or deleted.
Guidance
When personally identifiable information is corrected or deleted, organizations take steps to ensure that all authorized recipients of such information, and the individual with whom the information is associated or their designated representatives, are informed of the corrected or deleted information.
Assessment Objective
{{ insert: param, si-18.05_odp }} and individuals are notified when the personally identifiable information has been corrected or deleted.
System and information integrity policy
system and information integrity procedures
personally identifiable information processing policy
system configuration
individual requests for corrections or deletions
notifications of correction or deletion action
system audit records
system security plan
privacy plan
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records
Organizational personnel responsible for sending correction or deletion notices
organizational personnel with information security and privacy responsibilities
Organizational processes for notifications of correction or deletion
automated mechanisms supporting and/or implementing notifications of correction or deletion