For the “Trusted Intermediary” design, must the Phase I architecture address compliance with a specific federal privacy framework
For the “Trusted Intermediary” design, must the Phase I architecture address compliance with a specific federal privacy framework (e.g., NIST Privacy Framework, FISMA, CCPA-equivalent), or may proposers define their own privacy protection approach aligned with the spirit of the topic?
2
votes
Gino Volpi
shared this idea
-
Phase I is intended to demonstrate a feasibility concept and we expect the proposal to comply with the privacy framework necessary to protect any data being used during the feasibility concept demonstration. The proposal should have a plan to come into compliance with all USDOT requirements prior to a potential deployment.
