SI-18(02) Data Tags
All changes in this version
Title
Data Tags
Control
Employ data tags to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.
Discussion
Data tagging personally identifiable information includes tags that note processing permissions, authority to process, de-identification, impact level, information life cycle stage, and retention or last updated dates. Employing data tags for personally identifiable information can support the use of automation tools to correct or delete relevant personally identifiable information.
Related controls
ac-16, ac-3, sc-16
Assessment objective
SI-18(02) data tags are employed to automate the correction or deletion of personally identifiable information across the information life cycle within organizational systems.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).