PRIVACY IMPACT ASSESSMENTS

At the Defense Information Systems Agency, we are committed to protecting the privacy of our customers and employees, especially as we modernize our information and employee management systems. We make privacy a priority by addressing it throughout the development of our systems and integrating protections into their lifecycle. A Privacy Impact Assessment is the primary tool we use to identify and address privacy concerns during system development. Through the PIA process, we also ensure compliance with laws and regulations that govern privacy for our customers and employees.

Section 208 of the E-Government Act of 2002 requires all government agencies to conduct, review and publish PIAs. In line with DOD guidance, we review how privacy considerations are handled when we acquire or develop new IT systems or begin collecting new electronic information that includes personally identifiable information. We conduct PIAs for all new or significantly modified IT systems or projects that collect, maintain, or share personal information about the public, federal personnel, contractors, or foreign nationals working at U.S. military facilities abroad.

We use PIAs to:

  • Inform the public about the information we collect about them.
  • Address the privacy impacts of our systems.
  • Ensure we collect only the personal information we need to administer our programs.

PIAs also confirm that:

  • We use personal information only for its intended purpose.
  • We keep information accurate and up to date.
  • We protect the data while we use it and hold it only for as long as necessary.

DOD and DISA Privacy Impact Assessment Guidance

Completed DISA Privacy Impact Assessments