NIST Seeking Comment on Proposed Privacy Framework

The National Institute of Standards and Technology on Nov. 13 published a Request for Information seeking comment on its “NIST Privacy Framework: An Enterprise Risk Management Tool” that the agency expects to issue in early 2019. NIST said it “envisions that the Privacy Framework will be a voluntary tool for organizations to better identify, assess, manage, and communicate about privacy risks so that individuals can enjoy the benefits of innovative technologies with greater confidence and trust.” The RFI seeks comment on “information regarding organizational considerations for privacy risk management, the structure of the Privacy Framework, and specific privacy practices to be included.” Comments are due by Dec. 31.