The organization describes, in its privacy notices, the purpose(s) for which personally identifiable information (PII) is used.
No STIG checks reference this CCI.