BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SI-12(01) Limit Personally Identifiable Information Elements

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded SI Privacy baseline part of SI-12

Title

Limit Personally Identifiable Information Elements

Control

Limit personally identifiable information being processed in the information life cycle to the following elements of personally identifiable information: [Assignment: elements of personally identifiable information].

Discussion

Limiting the use of personally identifiable information throughout the information life cycle when the information is not needed for operational purposes helps to reduce the level of privacy risk created by a system. The information life cycle includes information creation, collection, use, processing, storage, maintenance, dissemination, disclosure, and disposition. Risk assessments as well as applicable laws, regulations, and policies can provide useful inputs to determining which elements of personally identifiable information may create risk.

Parameters

si-12.01_odp: elements of personally identifiable information

Related controls

pm-25

Assessment objective

SI-12(01) personally identifiable information being processed in the information life cycle is limited to [Assignment: elements of personally identifiable information].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).