PL-05 Privacy Impact Assessment

Planning

Low Moderate High

Description

The organization conducts a privacy impact assessment on the information system in accordance with OMB policy.

Supplemental Guidance

OMB Memorandum 03-22 provides guidance for implementing the privacy provisions of the E-Government Act of 2002.

Enhancements

(0) None.

Compliance Mappings

ISO 42001:2023

A.5.2A.5.3A.5.4A.5.5

ANSSI

Hygiene.41

FINMA Circular 2023/1

IV.D(78)IV.D(79)

OSFI B-13

B-13.1.3

EU GDPR

Art.35(1)Art.35(7)Art.36(1)

EU DORA

Art.6(2)Art.6(5)

LGPD + BCB 4893

LGPD.Art.37-38

ISO 17799 (legacy)

15.1.4

COBIT 4.1 (legacy)

None.