AICPA Privacy Management Framework (PMF)
What is AICPA Privacy Management Framework (PMF)?
The AICPA Privacy Management Framework (PMF) provides a comprehensive framework for CPA practitioners and organisations to manage and report on privacy risk. It builds on the Generally Accepted Privacy Principles (GAPP) and SOC 2 Trust Services Criteria for Privacy. It comprises 26 controls organised across 10 domains, and applies in the United States (AICPA).
How AICPA Privacy Management Framework (PMF) maps to other frameworks
All 26 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 10 domains AICPA Privacy Management Framework (PMF) groups its controls into
Where AICPA Privacy Management Framework (PMF) overlaps with the standards you already hold
What AICPA Privacy Management Framework (PMF) means in your sector
What AICPA Privacy Management Framework (PMF) means for your job
Questions people ask about AICPA Privacy Management Framework (PMF)
What is AICPA Privacy Management Framework?
How many controls does AICPA Privacy Management Framework have?
Where does AICPA Privacy Management Framework apply?
What frameworks does AICPA Privacy Management Framework map to?
How do I get started with AICPA Privacy Management Framework compliance?
Query AICPA Privacy Management Framework (PMF) programmatically
AICPA Privacy Management Framework (PMF), its 26 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
AICPA Privacy Management Framework (PMF) API reference and MCP config →What AICPA Privacy Management Framework (PMF) requires, control by control
Each page carries the requirement text for one AICPA Privacy Management Framework (PMF) control and what an assessor expects to see as evidence.
- PMF-A-1 Individual Access Rights
- PMF-A-2 Access Request Process
- PMF-AN-1 Privacy Notice
- PMF-AN-2 Purpose Specification
- PMF-AN-3 Privacy Agreements
- PMF-CC-1 Lawful and Fair Collection
- PMF-CC-2 Collection Limitation
- PMF-CC-3 Consent Mechanisms
- PMF-D-1 Third-Party Disclosure Controls
- PMF-D-2 Third-Party Agreements
How ready are you for AICPA Privacy Management Framework (PMF)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.