Identity Proofing - Privacy Notice Published, v3.0

Requirements for explicit notice being provided regarding the collecting of PII during identity proofing.

Assessment Step

1
Notice Published (NoticePublished)
Does the CSP publish a privacy notice with all required information?
Artifact
Documentation
Provide policy or practices indicating conformance to the requirement.

Conformance Criteria (1)

Notice Published
The CSP SHALL document and publish a Privacy Notice which describes its purposes in collecting and maintaining a record of the attributes necessary for identity proofing, including whether such attributes are voluntary or mandatory to complete the identity proofing process, and the consequences for not providing the attributes.
Citation
SP800-63A
Section 4.2 P3