4—4
>Control Description
Agencies should only create, collect, use, process, store, maintain, disseminate, or disclose PII that is directly relevant and necessary to accomplish a legally authorized purpose, and should only maintain PII for as long as is necessary to accomplish the purpose.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.