Tools·NISTEN
Export
NIST Privacy Framework
The US National Institute of Standards and Technology’s voluntary framework for managing privacy risk in an organisation, organised in functions (identify, govern, control, communicate, protect), with profiles and crosswalks to other frameworks. Not GDPR-specific, often used to structure a privacy programme.
When to use itAn international organisation wants one risk framework that also maps onto US practice.
- Published by
- NIST (government)
- Written for
- United States
- For
- DPOs and privacy officers, controllers
- Cost
- free
- Languages
- English
- Provisions
- GDPR Art. 24, GDPR Art. 32
View the standardnist.gov
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
AEPD Evalúa-Riesgo RGPD: does this processing need a DPIA? (AEPD) An online tool of the Spanish DPA that makes a first risk analysis of one processing operation and tells whether it is likely to need a DPIA, using the high-risk criteria of the… ES ·calculator
Standard Baseline Informatiebeveiliging Overheid (BIO2) The information security baseline for all Dutch public bodies, BIO2 version 1.3 (January 2026), built on ISO/IEC 27001 and 27002:2022 with government-specific measures. Suppliers… NL ·Ministerie van BZK ·in Dutch
Standard Standard Data Protection Model (SDM), German DPAs The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation,… DE ·Datenschutzkonferenz (DSK)
CNIL CNIL GDPR guide for developers The CNIL’s open guide for developers in eighteen factsheets: identifying personal data, preparing a project, securing the environment and code, minimising collection, managing… developer ·open source
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.… checklist