PM-21
Program Management
Accounting of Disclosures
Description
a. Develop and maintain an accurate accounting of disclosures of personally identifiable information, including: b. Retain the accounting of disclosures for the length of the time the personally identifiable information is maintained or five years after the disclosure is made, whichever is longer; and c. Make the accounting of disclosures available to the individual to whom the personally identifiable information relates upon request.
Mapped SPARTA techniques
No techniques mapped to this control.
Cite as SafeMode Space, nist-80053-rev5 PM-21.