SC-42(4) Notice of Collection
Control enhancement of SC-42 Sensor Capability and Data
Control
Employ the following measures to facilitate an individual’s awareness that personally identifiable information is being collected by [Assignment: sensors]: [Assignment: measures].
Discussion
Awareness that organizational sensors are collecting data enables individuals to more effectively engage in managing their privacy. Measures can include conventional written notices and sensor configurations that make individuals directly or indirectly aware through other devices that the sensor is collecting information. The usability and efficacy of the notice are important considerations.
Related controls
Need SC-42(4) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.