NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0

National Institute of Standards and Technology

doi:https://doi.org/10.6028/NIST.CSWP.10

White Paper NIST CSWP 10

NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0

Documentation Topics

Date Published: January 16, 2020

Author(s)

National Institute of Standards and Technology

Abstract

This publication describes the voluntary NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management (Version 1.0). The Privacy Framework is a tool developed in collaboration with stakeholders intended to help organizations identify and manage privacy risk to build innovative products and services while protecting individuals’ privacy. The Privacy Framework provides a flexible, risk- and outcome-based approach, intended to be widely usable by organizations of all sizes and agnostic to any particular technology, sector, law, or jurisdiction. The Privacy Framework follows the structure of the Framework for Improving Critical Infrastructure Cybersecurity to facilitate the use of both frameworks together. Complete information about the Privacy Framework is available at https://www.nist.gov/privacyframework.

Keywords

privacy; privacy framework; risk management; privacy engineering

Control Families

None selected

Documentation

Publication:
White Paper (DOI)

Supplemental Material:
Local Download (pdf)
Privacy Framework and Core (other)
Translations of the PF 1.0 (web)

Related NIST Publications:
ITL Bulletin

Document History:
04/30/19: White Paper (Draft)
09/09/19: White Paper (Draft)
01/16/20: White Paper NIST CSWP 10 (Final)

Topics

Security and Privacy
privacy; risk management

Applications
enterprise