Privacy requirement

{
  "id": "MLC-T-CYB-003264",
  "term": "Privacy requirement",
  "field": "Cybersecurity",
  "definitions": [
    "1. A requirement that applies to an information system or an organization that is derived from applicable laws, executive orders, directives, policies, standards, regulations, procedures, and/or mission/business needs with respect to privacy. Note: The term privacy requirement can be used in a variety of contexts from high-level policy activites to low-level implementation activities in system development and engineering disciplines.\n\n2. A specification for system/product/service functionality to meet stakeholders’ desired privacy outcomes.",
    "1. Requirements of an organization, information program, or system that are derived from applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, procedures, or organizational mission and business case needs with respect to privacy.\n\n2. A requirement that applies to an information system or an organization that is derived from applicable laws, executive orders, directives, policies, standards, regulations, procedures, and/or mission/business needs with respect to privacy.\n\n3. Requirements levied on an organization, information program, or information system that are derived from applicable laws, Executive Orders, directives, policies, standards, instructions, regulations, procedures, or organizational mission/business case needs to ensure that privacy protections are implemented in the collection, use, sharing, storage, transmittal, and disposal of information."
  ],
  "references": [
    "NIST SP 800-37 Rev. 2",
    "NIST Privacy Framework Version 1.0",
    "NIST CSRC Glossary",
    "NIST SP 800-53A Rev. 5",
    "NIST SP 800-18r2 from NIST SP 800-37 Rev. 2",
    "NIST SP 800-53A Rev. 4 [Superseded]"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/privacy-requirement/"
}