id: "SI-19(01)" title: "Collection" family: "SI" family_name: "System and Information Integrity" sort_id: "si-19.01" priority: "P1" implementation_level: "system" parent: "SI-19" enhancement: True
Statement
De-identify the dataset upon collection by not collecting personally identifiable information.
Guidance
If a data source contains personally identifiable information but the information will not be used, the dataset can be de-identified when it is created by not collecting the data elements that contain the personally identifiable information. For example, if an organization does not intend to use the social security number of an applicant, then application forms do not ask for a social security number.
Assessment Objective
the dataset is de-identified upon collection by not collecting personally identifiable information.
System and information integrity policy
system and information integrity procedures
personally identifiable information processing policy
de-identification procedures
procedures for minimizing the collection of personally identifiable information
system configuration
data collection mechanisms
system security plan
privacy plan
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records
Organizational personnel responsible for de-identifying the dataset
organizational personnel with information security and privacy responsibilities
Automated mechanisms preventing the collection of personally identifiable information