Compliance
Understand how privacy risk management is operationalized through our PIAs and SORNs.
Privacy Impact Assessment (PIA) describes a process used to evaluate the collection of personal data in information systems. The objective of a PIA is to determine if collected personal information data is necessary and relevant.
To accomplish this objective, a PIA is used to identify and address information privacy when planning, developing, implementing, and operating individual agency information management systems and integrated information systems. A PIA will assess privacy risks associated with operating information systems that collect, access, use, or disseminate personal information.
Last updated: Wednesday, March 3, 2021