# NIST PF PROTECT Function — Standards References

## Primary Standards

### NIST Privacy Framework Version 1.0
- **Published**: January 16, 2020
- **Relevance**: Defines PROTECT function subcategories PR.AC, PR.DS, PR.PO

### NIST Cybersecurity Framework Version 1.1
- **Published**: April 2018
- **Relevance**: The PROTECT function bridges CSF and PF; many subcategories are shared

### NIST SP 800-53 Rev. 5
- **Relevance**: AC (Access Control), SC (System/Communications Protection), MP (Media Protection), CP (Contingency Planning) control families

### NIST SP 800-88 Rev. 1 — Guidelines for Media Sanitization
- **Published**: December 2014
- **Relevance**: Data destruction methods for PR.PO-P5

### NIST SP 800-175B — Guideline for Using Cryptographic Standards
- **Published**: March 2016
- **Relevance**: Encryption standards for PR.DS-P1 and PR.DS-P2

## Regulatory Alignment

### GDPR
- Article 25: Data protection by design and by default
- Article 32: Security of processing (encryption, pseudonymization, resilience, testing)
- Article 33-34: Breach notification (PR.PO-P7)

### PCI DSS v4.0
- Requirements 3-4: Encryption at rest and in transit, relevant for PR.DS