SAMHSA.gov
The Substance Abuse & Mental Health Services Administration


SAMHSA IT Page

IT Resources for Contractors

P3P Instructions for Web Site Developers

As of August 31, 2005, all SAMHSA-funded web sites must include code for Machine Readable P3P compliancy. Below are instructions to make a web site P3P compliant.

The procedure to make each site P3P compliant is fairly straightforward. Please follow the instructions on this web page carefully. Once done, SAMHSA’s web team will validate the site for p3p compliance. (NOTE: If you site is not live, the SAMHSA web team will validate the site once the URL for the site (www.YourSite.samhsa.gov) is in place.

P3P Instruction:

  • Download the W3C file by clicking here w3c.zip file. Unzip this zip file into the /root directory of your web site. Once unzipped you should have a folder called “W3C” and one file inside called p3p.xml. Do not do anything with this file.

  • In the code Header of each web page add the following line just below the <HEAD> tag
    <link rel="P3Pv1" href="/w3c/p3p.xml">

Your code on each web page should then look like this:

<HEAD>
<link rel="P3Pv1" href="/w3c/p3p.xml">

Next, you must make a change to the HTTP Header of the web site in IIS. (If your site is hosted by SAMHSA on SAMHSA's web servers, ignore this step). Follow these directions to change the HTTP header.

  • a. Right click on the Web site under IIS.

    b. Click on the “HTTP Headers” tab.

    c. Click on the “Add” button under Custom HTTP Headers.

    d. Under “Custom Header Name” enter the name: P3P

    e. In the “Custom Header Value” field enter the value:

    CP="CURi ADMa DEVa PSAa OUR PHY STP ONL PUR COM NAV INT DEM DSP NOI LAW"

    f. Click the “OK” button.

    g. Click on the “OK” button to close the Properties window. That’s it

  • Add a link to the footer of each Web page titled "SAMHSA Privacy Policy" and link it to our privacy policy at http://www.samhsa.gov/privacy.aspx.

  • Once complete, email the SAMHSA webmaster at webmaster@samhsa.hhs.gov to confirm the site is ready for a validation test. We will validate and send you confirmation that your site is in compliance with P3P regulations.

If you have questions, please do not hesitate to contact us via email at webmaster@samhsa.hhs.gov. Your cooperation is greatly appreciated!


Last Update: 10/12/2007