Date Published: April 14, 2025
Comments Due:
Email Comments to:
Author(s)
National Institute of Standards and Technology
Announcement
The NIST Privacy Framework is a “living” tool meant to evolve to meet stakeholder needs, and the time has come to update to Version 1.1. This update builds on the success of Privacy Framework 1.0 by responding to current privacy risk management needs, realigning with NIST Cybersecurity Framework (CSF) 2.0, and enhancing usability.
The following resources are included with the Privacy Framework 1.1 IPD release:
NIST welcomes stakeholder feedback on the Privacy Framework 1.1 IPD by June 13, 2025.
To receive periodic updates and hear about other opportunities to engage, subscribe to our Privacy Engineering mailing list. If you have questions, please contact us at privacyframework@nist.gov.
The NIST Privacy Framework 1.1 is a voluntary tool developed in collaboration with stakeholders intended to help organizations identify and manage privacy risk to build innovative products and services while protecting individuals’ privacy. It provides high-level privacy risk management outcomes that can be used by any organization to better understand, assess, prioritize, and communicate its privacy activities. This document introduces the Privacy Framework and privacy risk management practices, highlights the Framework’s basic elements, and offers examples of how it can be used.
The NIST Privacy Framework 1.1 is a voluntary tool developed in collaboration with stakeholders intended to help organizations identify and manage privacy risk to build innovative products and services while protecting individuals’ privacy. It provides high-level privacy risk management outcomes...
See full abstract
The NIST Privacy Framework 1.1 is a voluntary tool developed in collaboration with stakeholders intended to help organizations identify and manage privacy risk to build innovative products and services while protecting individuals’ privacy. It provides high-level privacy risk management outcomes that can be used by any organization to better understand, assess, prioritize, and communicate its privacy activities. This document introduces the Privacy Framework and privacy risk management practices, highlights the Framework’s basic elements, and offers examples of how it can be used.
Hide full abstract
Keywords
framework; privacy; privacy framework; privacy risk; privacy risk management; profiles; risk management; tiers
Control Families
None selected
