Minimization of Personally Identifiable Information Used in Testing, Training, and Research (PM-25)

Develop, document, and implement policies and procedures that address the use of personally identifiable information for internal testing, training, and research; Limit or minimize the amount of personally identifiable information used for internal testing, training, and research purposes; Authorize the use of personally identifiable information when such information is required for internal testing, training, and research; and Review and update policies and procedures [organization-defined].

Related Controls(5)