Requirements of an organization, information program, or system that are derived from applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, procedures, or organizational mission and business case needs with respect to privacy.
Sources:
NIST SP 800-53A Rev. 5
A requirement that applies to an information system or an organization that is derived from applicable laws, executive orders, directives, policies, standards, regulations, procedures, and/or mission/business needs with respect to privacy.
Sources:
NIST SP 800-18r2
under privacy requirements
from
NIST SP 800-37 Rev. 2