The IT Law Wiki
Line 11: Line 11:
 
== Sources ==
 
== Sources ==
   
* 5 U.S.C. §552a(a)(5).[http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t05t08+27+0++%28%29%20%20AND%20%28%285%29%20ADJ%20USC%29%3ACITE%20AND%20%28USC%20w%2F10%20%28552a%29%29%3ACITE]
+
* 5 U.S.C. §552a(a)(5).[http://www.opm.gov/feddata/USC552a.txt]
 
* TSA Management Directive 2100.2.[http://www.tsa.gov/assets/pdf/foia/TSA_MD_2100_2_FINAL3_050725.pdf]
 
* TSA Management Directive 2100.2.[http://www.tsa.gov/assets/pdf/foia/TSA_MD_2100_2_FINAL3_050725.pdf]
 
[[Category:Privacy]]
 
[[Category:Privacy]]

Revision as of 03:59, 26 September 2010

Overview

The Privacy Act of 1974 requires federal agencies to publish a System of Records Notice (SORN) in the Federal Register when personally identifiable information (PII) is maintained by a federal agency in a system of records and the information is retrieved by a personal identifier. The SORN describes, among other things, the purpose of the collection, information sharing, categories of records and individuals covered, record retention and destruction, and how records are retrieved within the system.

Part of the Privacy Act analysis requires determining whether certain Privacy Act exemptions should be taken to protect the records from disclosure to an individual because of law enforcement and/or national security reasons.

Department of Homeland Security

If a SORN is required, the program manager will work with the component Privacy Officer or PPOC and component counsel to write a SORN for submission to the DHS Privacy Office.

Sources

  • 5 U.S.C. §552a(a)(5).[1]
  • TSA Management Directive 2100.2.[2]