Privacy Impact Assessments

DoD Directive 5400.11: Department of Defense Privacy Program

This Regulation is reissued under the authority of DoD Directive 5400.11, “DoD Privacy Program,” May 8, 2007. It provides guidance on section 552a of title 5 United States Code (U.S.C.), the Privacy Act of 1974, as amended, and prescribes uniform procedures for implementation of the DoD Privacy Program.

• Identification #: DoD Directive 5400.11-R
• Date: 10/29/2014
• Type: Directives
• Topics: Submit a Data Sharing Application | Privacy Act at DHA | Freedom of Information Act | Privacy Impact Assessments | Breaches of PII and PHI | How HIPAA Protects You | HIPAA Compliance within the MHS

Examples of PII

Personally identifiable information (PII) is information that identifies, links, relates, or is unique to, or describes you. This also includes information which can be used to distinguish or trace your identity and any other personal information which is linked or linkable to you.

DoD Instruction 8500.01: Cybersecurity

This Instruction reissues and renames DoD Directive (DoDD) 8500.01E as a DoD Instruction (DoDI) pursuant to the authority in DoDD 5144.02 to establish a DoD cybersecurity program to protect and defend DoD information and information technology (IT).

• Identification #: DoD Instruction 8500.01
• Date: 3/14/2014
• Type: Instructions
• Topics: Privacy Impact Assessments

DoDI 8510.01: Risk Management Framework (RMF) for DoD Information Technology (IT)

This Instruction reissues and renames DoD Instruction (DoDI) 8510.01 in accordance with the authority in DoD Directive (DoDD) 5144.02. It also establishes the RMF for DoD IT (referred to in this Instruction as “the RMF”), establishing associated cybersecurity policy, and assigning responsibilities for executing and maintaining the RMF.

• Identification #: DoD Instruction Number 8510.01
• Date: 3/12/2014
• Type: Instructions
• Topics: Privacy Impact Assessments

Machine-Readable Policies Information Paper

This Information Paper provides an overview of the E-Government (E-Gov) Act of 2002 mandating the use of machine-readable privacy policies by Federal agencies on websites used by the public.

OMB Memorandum M-10-23, Guidance for Agency Use of Third-Party Websites and Applications

This Memorandum requires Federal agencies to take specific steps to protect individual privacy whenever they use third-party websites and applications to engage with the public.

• Identification #: OMB Memorandum M-10-23, Guidance for Agency Use of Third-Party Websites and Applications
• Date: 6/25/2010
• Type: Memorandums
• Topics: Privacy Impact Assessments

OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002

This Guidance provides information to Federal agencies on implementing the privacy provisions of the E-Government Act of 2002, which was signed by the President on December 17, 2002 and became effective on April 17, 2003.

• Identification #: OMB M-03-22
• Date: 9/26/2003
• Type: Memorandums
• Topics: Privacy Impact Assessments

OMB Circular A-130, Management of Federal Information Resources

This Circular (Transmittal Memorandum No. 4) establishes policy for the management of Federal information resources. The Office of Management and Budget (OMB) includes procedural and analytic guidelines for implementing specific aspects of these policies as appendices.

• Identification #: OMB Circular No. A-130 Revised, Transmittal Memorandum No. 4
• Date: 11/28/2000
• Type: Guidelines
• Topics: Privacy Act at DHA | Privacy Impact Assessments