System of records notice

{
  "id": "MLC-T-CYB-004204",
  "term": "System of records notice",
  "field": "Cybersecurity",
  "definition": "1. A notice that federal agencies publish in the Federal Register to describe their system of record.\n\n2. The Privacy Act requires each agency to publish a notice of its systems of records in the Federal Register. This is called a System of Record Notice (SORN).\n\n3. An official public notice of an organization’s system(s) of records, as required by the Privacy Act of 1974, that identifies: (i) the purpose for the system of records; (ii) the individuals covered by information in the system of records; (iii) the categories of records maintained about individuals; and (iv) the ways in which the information is shared.\n\n4. The notice(s) published by an agency in the Federal Register upon the establishment and/or modification of a system of records describing the existence and character of the system.",
  "abbreviation": "SORN",
  "references": [
    "NIST SP 800-63-4; NIST SP 800-63A-4",
    "NIST SP 800-79-2",
    "NIST SP 800-53 Rev. 4 [Superseded]",
    "NIST SP 800-53 Rev. 5 from OMB Circular A-108",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/system-of-records-notice/"
}