FBI CJIS Security Policy SI-12(1): SI-12(1) Information Management and Retention | Limit Personally Identifiable Information Elements

Limit the personally identifiable information processed through the information life cycle to the minimum needed for the purpose of collection (section 4.3).

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in SI: System and Information Integrity – FBI CJIS Security Policy

SI-1 SI-1 Policy and Procedures
SI-10 SI-10 Information Input Validation
SI-11 SI-11 Error Handling
SI-12 SI-12 Information Management and Retention
SI-12(2) SI-12(2) Information Management and Retention | Minimize Personally Identifiable Information in Testing, Training, and Research
SI-12(3) SI-12(3) Information Management and Retention | Information Disposal
SI-16 SI-16 Memory Protection
SI-2 SI-2 Flaw Remediation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls