# SI-12(2) — Minimize Personally Identifiable Information in Testing, Training, and Research

- **Control ID:** SI-12(2)
- **Family:** [SI](/md/families/SI.md)
- **Baselines:** No content available.
- **Enhancement of:** [SI-12](/md/controls/SI-12.md)

## Description

Use the following techniques to minimize the use of personally identifiable information for research, testing, or training: \[assignment\].

## Discussion

Organizations can minimize the risk to an individual’s privacy by employing techniques such as de-identification or synthetic data. Limiting the use of personally identifiable information throughout the information life cycle when the information is not needed for research, testing, or training helps reduce the level of privacy risk created by a system. Risk assessments as well as applicable laws, regulations, and policies can provide useful inputs to determining the techniques to use and when to use them.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

- [PM-22](/md/controls/PM-22.md)
- [PM-25](/md/controls/PM-25.md)
- [SI-19](/md/controls/SI-19.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.