osd/js privacy office

HOW AND WHEN TO WRITE A PRIVACY ACT STATEMENT (PAS)

When do you need a PAS?
When you request an individual to furnish personal information (name, date of birth, social security number, etc) for a system of records, regardless of the method used to collect the information (i.e., forms, personal or telephonic interview, etc).

Note: If the information requested will not be included in a system of records, a PAS is not required.

How do you write a PAS?
The general format for a PAS is AUTHORITY; PURPOSE; ROUTINE USES; AND DISCLOSURE.

First, identify the PA systems notice where you are going to store the information. If you need assistance, contact the OSD/JS Privacy Office.

Second, using information from the systems notice fill in the following areas: AUTHORITY AND PURPOSE. Under Authority, list the Federal law or Executive Order that appears in the systems notice (i.e., 5 U.S.C. 301, Departmental Regulations and Executive Order 9397 (SSN). Under Purpose, copy the same information that is contained in the systems notice under "Purpose."

Third, under ROUTINE USES address who in/outside the organization will have access to the information (i.e., used by the security office to annotate that training has been accomplished). Do not cite "Blanket Routine Uses apply."

Fourth, under DISCLOSURE cite whether or not the disclosure of information is "Voluntary" or "Mandatory". It is only appropriate to cite "Mandatory" when a Federal Law or E.O. of the President specifically imposes a requirement to furnish the information and provides a penalty for failure to do so. If furnishing information is a condition for granting a benefit or privilege voluntarily sought by the individual, it is voluntary for the individual to give the information.

In view of the above, most statements read as follows: DISCLOSURE: Voluntary. However, failure to provide the requested information may result in (i.e., you not being considered for the position; not being notified in case of emergency; etc).

Does the PAS have to appear on the form?
Yes or on a separate form that can be retained by the individual collecting the information. If the information is collected by means other than a form completed by the individual (i.e., solicited over the telephone), a PAS should be read to the individual and if requested by the individual, a copy sent to him/her.

When forms are used to collect information about individuals for a system of records, the PAS shall appear as follows (listed in order of preference):

  1. Immediately below the title of the form;
  2. Elsewhere on the front page of the form (clearly indicating it is the PAS).
  3. On the back of the form with a notation of its location before the title of the form, or
  4. On a separate form which the individual may keep.

Does the individual have to sign the PAS?
NO.

You will need Adobe Acrobat® Reader™ to view PDF files located on this site. If you do not already have Adobe Acrobat® Reader™, you can download it here for free.

This page was last modified on: July 19, 2010 2:26 PM

DoD CIO - PRIVACY ACT IMPACT ASSESSMENTS | E-GOVERNMENT ACT | PRIVACY & SECURITY | DISCLAIMER