A privacy impact assessment (pia) is an analysis of how information is handled:

What is PII?

Publication

3/4/2021

The term “PII” is defined by the Office of Management and Budget (OMB) in OMB Circular A-130, Managing Information as a Strategic Resource (July 2016) as: Information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information that is linked or linkable to a specific individual.

What is PHI?

Publication

3/4/2021

This is a description of items that fall under protected health information, otherwise known as "PHI".

Privacy Impact Assessment (PIA) Overview Information Paper

Fact Sheet

7/28/2016

This Information Paper provides an overview of Privacy Impact Assessment (PIA).

DODI 5400.16: DOD Privacy Impact Assessment Guidance

Policy

This instruction reissues DOD Instruction 5400.16 (Reference (b)) to establish policy and assign responsibilities for completion and approval of Privacy Impact Assessments.

• Identification #: DODI 5400.16
• Date: 7/14/2015
• Type: Instructions
• Topics: Privacy Impact Assessments

DoD Instruction 5400.16: DoD Privacy Impact Assessment (PIA) Guidance

Policy

This Instruction establishes policy and assigns responsibilities for completion and approval of PIAs in accordance with the guidance in DoD Instruction 5025.01 and the authority in DoD Directive 5144.1.

• Identification #: DoD Instruction 5400.16
• Date: 7/4/2015
• Type: Instructions
• Topics: Privacy Impact Assessments

Military Health System (MHS) Privacy Impact Assessment (PIA) - Process Overview

Fact Sheet

4/16/2015

The Military Health System (MHS) Privacy Impact Assessment (PIA) Process Overview describes how to submit a PIA.

Examples of PII

Fact Sheet

5/1/2014

Personally identifiable information (PII) is information that identifies, links, relates, or is unique to, or describes you. This also includes information which can be used to distinguish or trace your identity and any other personal information which is linked or linkable to you.

DoD Instruction 8500.01: Cybersecurity

Policy

This Instruction reissues and renames DoD Directive (DoDD) 8500.01E as a DoD Instruction (DoDI) pursuant to the authority in DoDD 5144.02 to establish a DoD cybersecurity program to protect and defend DoD information and information technology (IT).

• Identification #: DoD Instruction 8500.01
• Date: 3/14/2014
• Type: Instructions
• Topics: Privacy Impact Assessments

Machine-Readable Policies Information Paper

Fact Sheet

7/1/2011

This Information Paper provides an overview of the E-Government (E-Gov) Act of 2002 mandating the use of machine-readable privacy policies by Federal agencies on websites used by the public.

OMB Memorandum M-10-23, Guidance for Agency Use of Third-Party Websites and Applications

Policy

This Memorandum requires Federal agencies to take specific steps to protect individual privacy whenever they use third-party websites and applications to engage with the public.

• Identification #: OMB Memorandum M-10-23, Guidance for Agency Use of Third-Party Websites and Applications
• Date: 6/25/2010
• Type: Memorandums
• Topics: Privacy Impact Assessments

OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002

Policy

This Guidance provides information to Federal agencies on implementing the privacy provisions of the E-Government Act of 2002, which was signed by the President on December 17, 2002 and became effective on April 17, 2003.

• Identification #: OMB M-03-22
• Date: 9/26/2003
• Type: Memorandums
• Topics: Privacy Impact Assessments

OMB Circular A-130, Management of Federal Information Resources

Policy

This Circular (Transmittal Memorandum No. 4) establishes policy for the management of Federal information resources. The Office of Management and Budget (OMB) includes procedural and analytic guidelines for implementing specific aspects of these policies as appendices.

• Identification #: OMB Circular No. A-130 Revised, Transmittal Memorandum No. 4
• Date: 11/28/2000
• Type: Guidelines
• Topics: Privacy Act at DHA | Privacy Impact Assessments