The U.S. Department of Commerce’s National Institute of Standards and Technology (“NIST”) now has released the preliminary draft of the “NIST Privacy Framework: A Tool for Improving Privacy through Enterprise Risk Management.” NIST is seeking comments on the preliminary draft of the Privacy Framework and plans to use these comments to develop version 1.0 of the Privacy Framework. Comments are due by 5:00 p.m. ET on October 24, 2019.
NIST developed the voluntary Privacy Framework in collaboration with private and public stakeholders and intends for it to be widely useable across industries, organizations, and jurisdictions. The Privacy Framework is based on the structure of the NIST Cybersecurity Framework so that the two frameworks can be used together.