The organization includes privacy requirements in other acquisition-related documents.
No STIG checks reference this CCI.