Personally Identifiable Information Processing Purposes

# Description

a. Identify and document the [organization-defined parameter] for processing personally identifiable information; b. Describe the purpose(s) in the public privacy notices and policies of the organization; c. Restrict the [organization-defined parameter] of personally identifiable information to only that which is compatible with the identified purpose(s); and d. Monitor changes in processing personally identifiable information and implement [organization-defined parameter] to ensure that any changes are made in accordance with [organization-defined parameter].