The requirements for how personally identifiable information can be processed or the conditions under which personally identifiable information can be processed.
Source(s):
NIST SP 800-53 Rev. 5
NIST SP 800-53A Rev. 5