The organization develops policies that minimize the use of personally identifiable information (PII) for research.
No STIG checks reference this CCI.