A privacy principle (FIPP) that limits an organization's creation, collection, use, processing, storage, maintaining, disseminating, or disclosing of PII to activities for which they have authority to do so, and identify this authority in appropriate notices.
Sources:
CNSSI 4009-2022
from
OMB Circular A-130 (2016) - adapted
The organization responsible for producing the original security configuration guidance represented by the checklist.
Sources:
NIST SP 800-70 Rev. 4
under Authority