controlPM-21

Accounting of Disclosures (PM-21)

Develop and maintain an accurate accounting of disclosures of personally identifiable information, including: Retain the accounting of disclosures for the length of the time the personally identifiable information is maintained or five years after the disclosure is made, whichever is longer; and Make the accounting of disclosures available to the individual to whom the personally identifiable information relates upon request.

program-managementgovernancestrategy