Privacy & Disclosure Law and Guidance

Statutes

The Privacy Act of 1974

The Freedom of Information Act

OPEN Government Act of 2007

Confidentiality and Disclosure of [tax] Returns and Return Information (IRC 6103)

E-Government Act of 2002

Federal Information Security Management Act of 2002

Health Insurance Portability and Accountability Act of 1996 (HIPAA)

Family Educational Rights and Privacy Act (FERPA)

Right to Financial Privacy Act (RFPA)

Help America Vote Act of 2002 (HAVA)

Presidential/White House Memoranda

January 21, 2009

• Freedom of Information Act
  
  
• Transparency and Open Government

March 16, 2010

• Freedom of Information Act
  

June 18, 2010

• Enhancing Payment Accuracy Through a "Do Not Pay List"

Relevant Executive Orders (EO) & Guidance

EO 13489 concerning new rules for obtaining information under FOIA

Attorney General's Memo for Agency Heads concerning FOIA March 19, 2009

EO 13478 Amendments To Executive Order 9397 Relating To Federal
Agency Use of Social Security Numbers

EO 13402 Strengthening Federal Efforts to Protect Against Identity Theft

EO 13392 Improving Agency Disclosure of Information

EO 13233 limited access to the records of former Presidents

EO 9397 concerning Numbering System for Federal Accounts Relating to Individual Persons

 
Office of Management and Budget Memoranda & Guidance

General

• M-04-24, Guidance for Expanded Electronic Government (E-Gov) President’s Management Agenda (PMA) Scorecard Cost, Schedule and Performance Standard for Success (August 23, 2004)
  


• M-03-22, OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002 (September 30, 2003)
   
• M-01-05, Guidance on Inter-Agency Sharing of Personal Data - Protecting Personal Privacy (December 20, 2000)
   
• Privacy Act Responsibilities for Implementing the Personal Responsibility and Work Opportunity Reconcilation Act of 1996 (November 3, 1997) (3 pages, 431 kb)
   
• Privacy Act Guidance -- Update (May 24, 1985) (10 pages, 647 kb)
   
• M-83-11, Guidelines on the Relationship Between the Privacy Act of 1974 and the Debt Collection Act of 1982, 48 Federal Register (FR) 15556, April 11, 1983 (March 30, 1983) (5 pages, 1.39 mb)
   
• Implementation of the Privacy Act of 1974, Supplemental Guidance, 40 FR 56741, December 4, 1975 (November 21, 1975) (3 pages, 215 kb)
   
• Congressional Inquiries which Entail Access to Personal Information Subject to the Privacy Act (October 3, 1975) (2 pages, 265 kb)
   
• Privacy Act Implementation, Guidelines and Responsibilities, 40 FR 28948, July 9, 1975 (July 8, 1975) (32 pages, 14.25 mb)
  
  

Open Government

• M-10-23, Guidance for Agency Use of Third-Party Websites and Applications (June 25, 2010)
  
  
• M-10-06, Open Government Directive (December 8, 2009)

Federal Website Policy (cookies)

• M-10-22, Guidance for Online Use of Web Measurement and Customization Technologies (June 25, 2010)
  
  
• Letter from John Spotila to Roger Baker, clarification of OMB Cookies Policy (September 5, 2000)
   
• Letter from Roger Baker to John Spotila on Federal agency use of Web cookies (July 28, 2000)
   
  
• M-99-18, Privacy Policies on Federal Web Sites (June 2, 1999)

Computer Data Matching

• Status of Biennial Reporting Requirements under the Privacy Act and the Computer Matching and Privacy Protection Act (June 21, 2000) (2 pages, 229 kb)
   
• Biennial Privacy Act and Computer Matching Reports (June 1998)
   
• Computer Matching and Privacy Protection Amendments of 1990 and the Privacy Act o1 1974, 56 FR 18599 (April 23, 1991) (3 pages, 592 kb)
   
• Final Guidance Interpreting the Provisions of Public Law 100-503, the Computer Matching and Privacy Protection Act of 1988, 54 FR 25818 (June 19, 1989) (12 pages, 1.45 mb)

Personally Identifiable Information Protection

• M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information (May 22, 2007)
  
  
• M-06-20, Fiscal Year 2006 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy Management (July 17, 2006)
  
  
• M-06-19, Reporting Incidents Involving Personally Identifiable Information and Incorporating the Cost for Security in Agency Information Technology Investments (July 12, 2006)
  
  
• M-06-16, Protection of Sensitive Agency Information (June 23, 2006)
  
  
• M-06-15, Safeguarding Personally Identifiable Information (May 22, 2006)
  
  
• M-05-08, Designation of Senior Agency Officials for Privacy (February 11, 2005)
  
  

[back to top]