NIST SP 800-53 Rev. 5
PM-20(1)
Program Management
enhancement

Privacy Policies on Websites, Applications, and Digital Services

Parent: PM-20

Description

Develop and post privacy policies on all external-facing websites, mobile applications, and other digital services, that: a. Are written in plain language and organized in a way that is easy to understand and navigate; b. Provide information needed by the public to make an informed decision about whether and how to interact with the organization; and c. Are updated whenever the organization makes a substantive change to the practices it describes and includes a time/date stamp to inform the public of the date of the most recent changes.

Mapped SPARTA techniques

No techniques mapped to this control.

Cite as SafeMode Space, nist-80053-rev5 PM-20(1).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.