Privacy Impact Assessment (PIA) Guide

Securities and Exchange Commission Office of Information Technology Alexandria, VA Privacy Impact Assessment (PIA) Guide Revised January 2007 Privacy Office Office of Information Technology Privacy Impact Assessment Guide Introduction The E-Government Act of 2002, Section 208, establishes the requirement for agencies to conduct Privacy Impact assessments (PIAs) for electronic information systems and collections1. The Assessment is a practical method of evaluating Privacy in information systems and collections, and documented assurance that Privacy issues have been identified and adequately addressed.

Data in the system (e.g., what data is collected and why) Attributes of the data (e.g., use and accuracy) Sharing practices Notice to Individuals to Consent/Decline Use (e.g., SORN) Access to data (i.e., Administrative and Technological Controls) 3 See Appendix B 4 See Appendix C …

Tags:

  Control

Information