Privacy Impact Assessment

Writers' First Review Draft:    (2VBB)

Term    (2WWL)

Privacy impact assessment (PIA)    (2WWM)

Origin/Source for Inclusion of the Term    (2WWN)

OMB Circular No. A–11 (2005) Section 53—Information Technology And E-Government    (2WWO)

OMB Context Definition    (2WWP)

Reference/URL OMB Context Definition    (2WWQ)

Business Definition    (2WWR)

Privacy Impact Assessment (PIA) - is an analysis of how information is handled: (i) to ensure handling conforms to applicable legal, regulatory, and policy requirements regarding privacy, (ii) to determine the risks and effects of collecting, maintaining and disseminating information in identifiable form in an electronic information system, and (iii) to examine and evaluate protections and alternative processes for handling information to mitigate potential privacy risks.    (2WWS)

Reference/URL for Business Definition    (2WWT)

OMB Memorandum M-03-22, OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002, http://www.whitehouse.gov/omb/memoranda/m03-22.html    (2WWU)

Technical Definition    (2WWV)

A process for examining the risks and ramifications of collecting, maintaining and disseminating information in identifiable form in an electronic information system, and for identifying and evaluating protections and alternative processes to mitigate the impact to privacy of collecting information in identifiable form. Consistent with September 26th, 2003 OMB guidance (M-03-22) implementing the privacy provisions of the E-Government Act, agencies must conduct privacy impact assessments for all new or significantly altered information technology investments administering information in identifiable form collected from or about members of the public. Agencies may choose whether to conduct privacy impact assessments for information technology investments administering information in identifiable form collected from or about agency employees.    (2WWW)

Reference/URL Technical Definition    (2WWX)

OMB Circular No. A–11 (2005) Section 53—Information Technology And E-Government    (2WWY)

Context Definition 1    (2WWZ)

Reference/URL Context Definition 1    (2WX0)

Context Definition 2    (2WX1)

Reference/URL for Context Definition 2    (2WX2)

Context Definition 3    (2WX3)

Reference/URL for Context Definition 3    (2WX4)

See Also Related Terms    (2WX5)