Celebrating Data Privacy Week with NIST’s Privacy Engineering Program

Grab your party hats – it’s Data Privacy Week!

Data Privacy Week is a global initiative led by the National Cybersecurity Alliance to spread awareness about online privacy and empower individuals and businesses to respect privacy, safeguard data, and enable trust. In celebration of this week, the NIST Privacy Engineering Program is reflecting on recent work and looking ahead to what’s coming in the new year.

Throughout 2026, we plan to continue collaborating with our privacy stakeholder community to develop and advance privacy risk management guidelines to help organizations of all sizes. Below is a sneak peek of what we have in store for this year. Keep an eye on our website for upcoming announcements about new publications, workshops, and other ways to engage with us.

Privacy Framework Version 1.1

In 2025, we released the Initial Public Draft of the Privacy Framework Version 1.1, and you showed up in a big way! We heard robust, thoughtful feedback from stakeholders across various sectors. We reviewed every comment received, along with insights we heard in working sessions, to craft the final version of the Privacy Framework 1.1 (which is coming soon in 2026!). The Privacy Framework, Version 1.1 responds to current privacy risk management needs, realigns with the NIST Cybersecurity Framework 2.0, and enhances usability.

During the Initial Public Draft’s comment period, we heard from stakeholders that there is a desire for new supplemental materials that support effective implementation of the Privacy Framework. In response, we’re excited to expand our suite of guidance this year! A few supplemental resources we anticipate developing later this year include:

• Implementation Guidance: We’re developing examples for how an organization could implement subcategories in the Privacy Framework 1.1! While the Privacy Framework is technology- and sector-agnostic, this implementation guidance can offer tailored examples.
• New Quick Start Guide for Small and Medium-Sized Business: Small- and medium-sized businesses asked for additional guidance on how to kick-start privacy risk management efforts with their unique environments. This Quick Start Guide will walk organizations through practical ways to implement the Privacy Framework 1.1.
• NIST Privacy Workforce Taxonomy & Privacy Framework 1.1 Mapping: This new mapping will connect how the Privacy Workforce Taxonomy’s Task, Knowledge, and Skill Statements align with the Privacy Framework 1.1’s updated Core.
• PF 1.1 Use Case: For additional hands-on implementation support, we’ll release a use case illustrating how a hypothetical organization could implement the Privacy Framework 1.1.

Differential Privacy Publications & Deployment Registry

In 2025, we were thrilled to release NIST 800-226, Guidelines for Evaluating Differential Privacy Guarantees. This publication is meant to help practitioners of all backgrounds better understand how to think about differentially private software solutions.

As follow-on work, we proposed a NIST-hosted database of differential privacy deployments—all contributed by community members. We published a draft describing the data schema, and the working group envisioned to maintain this repository – and were so pleased with the robust response to our open comment period. In 2026, we look forward to finalizing this repository and welcoming community contributions!

Data Governance and Management Profile

We’re continuing our work on Data Governance and Management (DGM)! Through this initiative, we plan to release a Profile, demonstrating how to use the NIST Privacy Framework and Cybersecurity Framework to address data governance and management activities for your organization.

This year we plan to release new material and host a virtual workshop to hear your feedback. Join our mailing list to receive updates about the workshop announcement in the coming months!