NIST’s new framework: Riding the wave of re-imagining privacy

Executive summary: NIST's draft Privacy Framework, modeled after the Cybersecurity Framework, aims to help organizations move from checkbox compliance to holistic, risk-based privacy programs by defining five core functions (Identify, Protect, Control, Inform, Respond), encouraging cross-disciplinary stakeholder involvement, and providing an approachable structure for adoption; the draft is undergoing public workshops and refinements with a target for finalization.