Use of Best Judgment for Individual PII Breach Notification Determinations
DoD Memo - Publish Date: 08/02/15
view Online
The purpose of this memo is to help Components (i.e., the Department of the Navy) toward optimal decision-making regarding PII breach risk and notification determinations.
The Department of Defense and the DON must continue their efforts to promote a culture to continuously 'think privacy' and act swiftly to develop and implement effective breach mitigation plans, when necessary. The challenge is that no two breaches of PII involve the exact same circumstances, personnel, systems, or information. A case-by-case analysis combined with the use of best judgment is required for effective breach management.