The requirements for how personally identifiable information can be processed or the conditions under which personally identifiable information can be processed.
Sources:
NIST SP 800-53 Rev. 5
NIST SP 800-53A Rev. 5