PII Breach Notification Controls
#.1.1 This directive establishes uniform U.S. Department of Transportation (DOT) policies, high level process flows, roles, and responsibilities to respond appropriately to situations that involve the unauthorized dissemination of Personally Identifiable Information (PII), in order to mitigate the risk of harm (including identity theft) should a Pll Breach occur.
#.1.2 It is DOT's intent to be compliant with all applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance concerning PII Breach notification requirements.
#.1.3 This directive complies with Office of Management and Budget (OMB) Memorandum 07-16 (OMB M-07-16), Safeguarding Against and Responding to the Breach of Personally Identifiable Information (PII) and OMB Memorandum regarding "Recommendations for Identity Theft Related Data Breach Notification," issued on September 20, 2006.