Tracker record · Federal · Agency guidance
NIST privacy and cybersecurity guidance
NIST's voluntary frameworks and guidance that Texas organizations use as reasonable-security evidence and governance scaffolding: the Privacy Framework and its revision status, the Data Governance and Management Profile, CSF 2.0, and special publications including SP 800-88 media sanitization, SP 800-61 incident handling, and SP 800-188 de-identification. Voluntary guidance is not law; it does not create duties, though it can evidence reasonable practices.
Status
- Legal status
- Issued: voluntary guidance; not binding law
- Allegation or finding
- Guidance (not law)
- Applicability
- Voluntary; organizations adopting the frameworks
- Enforceability
- Non-binding
- Procedural posture
- Privacy Framework 1.1: initial public draft April 14, 2025; no final version found as of October 13, 2026
- Law checked through
- October 13, 2026
- Citation
- CSF 2.0 (February 26, 2024); SP 800-61 Rev. 3 (April 2025); SP 800-88 Rev. 2 (September 26, 2025); Privacy Framework 1.0
- Source
- NIST CSWP 29 (CSF 2.0); NIST SP 800-61 Rev. 3; NIST SP 800-88 Rev. 2; NIST Privacy Framework 1.0
Procedural events
- 2024-02-26: NIST Cybersecurity Framework 2.0 published (NIST CSWP 29)
- Privacy Framework revision in progress
- NIST IR 8496 draft: development ceased
Related guides
- Reasonable Security and the Texas Cybersecurity Safe Harbor
- Data Governance Roles and Decision Rights
- Inventory, Catalogs, Metadata, and Data Architecture