Section 208 of the E-Government Act of 2002 requires agencies to conduct privacy impact assessments (PIA) for electronic information systems and collections, and make them publicly available. The Department of Army requires the completion of DD FORM 2930, Privacy Impact Assessment, to ensure that electronic information is collected, stored, or disseminated in a manner that protects the privacy of individuals and their information.
A PIA describes:
- what information is to be collected;
- why the information is being collected;
- the intended use of the agency of the information;
- with whom the information will be shared;
- what notice or opportunities for consent would be provided to individuals regarding what information is collected and how that information is shared;
- how the information will be secured (administrative, technical, and physical safeguards); and
- whether a system of records is being created under the Privacy Act of 1974.
This assessment will assist in the protection against any anticipated threats or hazards to the security or integrity of data, which could result in substantial harm, embarrassment, inconvenience, or unfairness to any individual on whom information is maintained.
Contact your local Information Management Officer (IMO) and local Command Privacy Official for guidance on conducting a PIA and submission to the Chief Information Officer (CIO/G-6). CIO/G-6 manages the PIA process. Approved PIAs are published on the Army CIO/G-6 website.