LexLint.ioBeta

Know the law your code answers to.

Law / Frameworks / NIST Privacy Framework / Identify-P

NIST Privacy Framework, Identify-PID.IM-P6

Data elements within the data actions are inventoried.NIST Privacy Framework, version 1.0, January 2020, ID.IM-P6

We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .

7
laws
7
jurisdictions
0
with court rulings behind them
0
not yet in force

Related controls in other frameworks the same duties, in at least two laws we track, reach both

  • Austria
  • California
  • Germany
  • Kuwait
  • Michigan
  • Mississippi
  • Montenegro

Sensitive categories

5 laws, 5 jurisdictions
JurisdictionLawWhat it asks, as read here
Austria GDPR Article 9, Special Categories of Personal Data, as Applied in Austria

Treat any biometric identifier your system derives through its own technical processing as special category data under Austrian and EU law alike, even where the underlying image or audio was lawfully public.
Germany GDPR Article 9 and BDSG Section 26(3), Special Categories of Personal Data and Their Processing for Employment in Germany

Treat any biometric identifier your system derives through its own technical processing as GDPR Article 9 special category data, whether or not the source photo or audio was publicly available.
Michigan Insurance Data Security Act, nonpublic information including biometric records

If you are a Michigan insurance licensee, treat a biometric record as nonpublic information requiring the chapter's data-security safeguards, alongside a Social Security number, driver's license number, or financial account number.
Mississippi Insurance Data Security Law, nonpublic information including biometric records

If you are a Mississippi insurance licensee, treat a biometric record as nonpublic information requiring this law's data-security safeguards, alongside a Social Security number, driver's license number, or financial account number.
Montenegro Law on Personal Data Protection, special categories of data

Distinctively designate and protect special categories of data against unauthorised access, under Article 13.

AI training data

1 law, 1 jurisdiction
JurisdictionLawWhat it asks, as read here
California Generative AI Training Data Transparency Act (AB 2013)

Cover the datasets and their sources and owners, an approximate count and description of the data points, whether the data includes copyrighted or personal information, and whether synthetic data generation was used

Security baseline statutes

1 law, 1 jurisdiction
JurisdictionLawWhat it asks, as read here
Kuwait Data Classification Policy

Maintain a unified data catalog with metadata describing your classified data, and review the classification periodically.

Full text of the NIST Privacy Framework, public domain (a US government work). Every control of the framework.