Canadian Privacy Impact Assessments (PIAs) identify potential privacy threats that exist in new or revamped federal government programs or services. The objective of the assessment is to eliminate or reduce privacy or security threats. All federal departments, agencies and institutions are obliged to conduct PIAs for any programs or services that may raise privacy concerns. As part of the process, the department must examine and asses the procedures for protection of personal information throughout the program’s lifecycle (i.e. collection, storage, usage, disclosure and [...]
Executive Order 13402 commanded the creation of a Presidential Identity Theft Task Force to examine how the Federal Government could better respond to and protect against data breaches resulting in identity theft. Under Federal regulations, such as the Privacy Act of 1974 and the Federal Information Security Management Act, individuals are guaranteed the security of their data, making adequate protection of data a matter of [...]
Memorandum 06-19 was issued by the Office of Management and Budget in July 2006 to update the reporting requirements for data breaches involving personally identifiable information. It also addressed the need to budget in anticipation of providing adequate data security. Memorandum 04-26 was issued in September 2004 regarding personal use policies for employees accessing government computers and the use of file sharing [...]
In September 2006, The Office of Management and Budget issued a memorandum suggested by the President’s Identity Theft Task Force to help government departments and agencies adequately protect data.
What is Identity Theft?
Identity theft is the unauthorized use of personally identifiable information (PII) by an individual to commit fraud, usually financial related fraud. This is achieved either by using financial account information or using an individual’s Social Security Number (SSN) to open new financial accounts. Identity theft is a serious problem costing American citizens millions of dollars every year. As one of the largest collectors of information, the U.S. Government must implement strong measures to reduce the risk of security breaches leading to identity [...]
In May 2006, an Executive Order of the President created the Identity Theft Task Force. The Task Force includes members of several Federal agencies and departments. In September 2006, the Task Force released a number of recommendations ahead of the May 2007 document “Combatting ID Theft: Strategic Plan” in order to help agencies get a head start on the growing problem of identity [...]
The Office of Management and Budget is one of several Government departments that issues new regulations and recommendations for protecting information maintained by the Federal Government. OMB Circular A-130, Memorandum-01-05, and Memorandum-05-08 are three important documents issued by the Office of Management and Budget for these [...]
Most privacy legislation and executive orders dealing with privacy concern protecting the common citizen’s right to privacy. While Government employees are not always afforded the same privacy and civil liberties rights, the government has taken some steps to safeguard their [...]
In 2007, the Department of Homeland Security an Office of Management and Budget, along with the Presidential Identity Theft Task Force, investigated information privacy and security practices in the United States Government. They developed a report called the Common Risks Impeding the Adequate Protection of Government Information (pdf)which included a list of ten common mistakes made by U.S. departments and agencies and provided recommendations for new practices to be implement to eliminate and reduce security [...]
Executive Order 12333 was issued in 1981 to regulate national intelligence activities. Part I of the Order outlines the goals and responsibilities of major Federal Agencies and Departments involved with national security an intelligence gathering. Part II created regulations for the collection of intelligence [...]
There are a number of more specific regulations, often attached to more extensive laws, that play a role in privacy protection in the U.S. Government. The Federal Agency Data Mining Reporting Act of 2007, The Federal Advisory Committee Act and the Government in the Sunshine Act all protect privacy by promoting public access to records dealing with Government [...]