NIST offers flexibility in core functions of draft privacy risk management framework, seeks comment

The National Institute of Standards and Technology has released a “drama free” preliminary draft of its much-anticipated privacy risk management framework that a leading official says sacrifices some complexity in allowing flexibility for organizations using the document.

The agency is seeking comments through Oct. 24 on the draft, the development of which coincides with efforts to craft national privacy legislation as a variety of state laws emerge on the issue.

NIST workshops on the document have highlighted disagreements over...