Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Guidelines and Tools
Guidelines, tools, and best practices can provide implementation support for the Privacy Framework or specific Subcategories.
Identify-P
Inventory and Mapping
ID.IM-P1 ID.IM-P2 ID.IM-P3 ID.IM-P4 ID.IM-P5 ID.IM-P6 ID.IM-P7 ID.IM-P8
Business Environment
Risk Assessment
ID.RA-P1 ID.RA-P2 ID.RA-P3 ID.RA-P4 ID.RA-P5
Data Processing Ecosystem Risk Management
ID.DE-P1 ID.DE-P2 ID.DE-P3 ID.DE-P4 ID.DE-P5
Govern-P
Governance Policies, Processes, and Procedures
GV.PO-P1 GV.PO-P2 GV.PO-P3 GV.PO-P4 GV.PO-P5 GV.PO-P6
Risk Management Strategy
Awareness and Training
GV.AT-P1 GV.AT-P2 GV.AT-P3 GV.AT-P4
Monitoring and Review
GV.MT-P1 GV.MT-P2 GV.MT-P3 GV.MT-P4 GV.MT-P5 GV.MT-P6 GV.MT-P7
Control-P
Data Processing Policies, Processes, and Procedures
CT.PO-P1 CT.PO-P2 CT.PO-P3 CT.PO-P4
Data Processing Management
CT.DM-P1 CT.DM-P2 CT.DM-P3 CT.DM-P4 CT.DM-P5 CT.DM-P6 CT.DM-P7 CT.DM-P8 CT.DM-P9 CT.DM-P10
Disassociated Processing
CT.DP-P1 CT.DP-P2 CT.DP-P3 CT.DP-P4 CT.DP-P5
Communicate-P
Communication Policies, Processes, and Procedures
Data Processing Awareness
CM.AW-P1 CM.AW-P2 CM.AW-P3 CM.AW-P4 CM.AW-P5 CM.AW-P6 CM.AW-P7 CM.AW-P8
Protect-P
Data Protection Policies, Processes, and Procedures
PR.PO-P1 PR.PO-P2 PR.PO-P3 PR.PO-P4 PR.PO-P5 PR.PO-P6 PR.PO-P7 PR.PO-P8 PR.PO-P9 PR.PO-P10
Identity Management, Authentication, and Access Control
PR.AC-P1 PR.AC-P2 PR.AC-P3 PR.AC-P4 PR.AC-P5 PR.AC-P6
Data Security
PR.DS-P1 PR.DS-P2 PR.DS-P3 PR.DS-P4 PR.DS-P5 PR.DS-P6 PR.DS-P7 PR.DS-P8