On September 6, 2019, the National Institute of Standards and Technology released a preliminary draft of its Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management.
The framework’s three-part structure purposely tracks NIST’s existing Cybersecurity Framework. Once the Privacy Framework is finalized, organizations will ideally be able to use both Frameworks to address privacy and security risks. NIST seeks comment on the preliminary draft of the Privacy Framework. The comment period closes on October 24, 2019.