NIST Privacy Framework
Like the NIST CSF, the NIST Privacy Framework is inclusive, drawing from numerous privacy frameworks to help simplify compliance across multiple frameworks at once.
Privacy Frameworks Are Here to Stay
With current trends indicating a global movement toward increased privacy regulation, and as so many of the requirements across frameworks overlap one another, the National Institute of Standards and Technology (NIST) has worked to aggregate requirements for a single framework that supports compliance across multiple standards. The voluntary set of controls, published as the NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management (Privacy Framework), was intended to support privacy for consumers and enterprise stakeholders alike:
- Building customers’ trust by supporting ethical decision-making in product and service design or deployment that optimizes beneficial uses of data while minimizing adverse consequences for individuals’ privacy and society as a whole; (Source, nvlpubs.nist.gov)
- Fulfilling current compliance obligations as well as future-proofing products and services to meet these obligations in a changing technological and policy environment; and
- Facilitating communication about privacy practices with individuals, business partners, assessors, and regulators.
The Overlap Between Privacy and Cybersecurity
While privacy entails, to a great degree, practices and policies around how you handle personal data (however that is being defined by the privacy frameworks with which you must comply), there is also an overlap with data protection. For example, it would not make sense to assure your customers that the data they share with you will not be given to any other organizations, but store it in an unsecured place where cyberattackers can access, exfiltrate, and publish that data. The NIST Privacy Framework takes into account the importance of not only creating sound policies for collecting, storing, and processing personal or consumer data, but also how you protect it. This framework has sought to incorporate the privacy requirements of existing and emerging standards, so when you choose the NIST Privacy Framework as your standard, you are likely to meet compliance requirements for multiple other frameworks by default.
Speak with a CISO Global Security Specialist Today
Our experts maintain the most respected credentials in
the industry across cybersecurity, risk and compliance,
forensics, incident response, ethical hacking, IEEE®
certified biometrics, security engineering, and more.
