NIST Privacy Framework

A privacy framework is only useful when you can apply it to how your organization actually handles personal information.   The NIST Privacy Framework helps identify privacy risks, define desired outcomes, assess existing practices, and plan improvements. But implementation isn't about working through every item in the Framework as a checklist. NIST specifically notes that organizations should select the activities and outcomes that fit their business or...

Organizations collect personal information across websites, applications, cloud platforms, employee systems, and third-party services. As data processing grows, so does the risk of using personal information in ways that create privacy problems for individuals or expose the organization to operational and compliance issues.   Managing these risks requires more than a list of privacy requirements. Teams need a way to understand how they process data, identify privacy...