CMRA PIA Memo

DEPARTM

DEPARTMENT OF THE ARMY
OFFICE OF THE SECRETARY OF THE ARMY
107 ARMY PENTAGON
WASHINGTON DC 20310-0107

Office, Chief Information Officer / G-6

SAIS-GKP
MEMORANDUM FOR FMMR(M&RA)
SUBJECT: Privacy Impact Assessment (PIA) DD Form 2930 with no Personally
Identifiable Information (PII)
1. References:
a. E-Government Act of 2002, 17 December 2002
b. DoD Directive 5400.11, DoD Privacy Program, 08 May 2007
c. DoD Instruction 5400.16, Privacy Impact Assessment (PIA) Guidance,
12 February 2009
d. Department of Army (DA) Privacy Impact Assessment (PIA) Guidance,
12 December 2006
e. Department of Army (DA) Updated Guidance for Submission of Privacy Impact
Assessment (s) (PIA), 31 July 2009
2. In accordance with (IAW) DoD Directive 5400.11, the Privacy Program directs all
Information Systems to submit a Privacy Impact Assessment (PIA) DD Form 2930 as
either proof of completion of a PII threshold assessment or when PII is collected,
maintained, used, or disseminated. It is the responsibility of the data owner to provide
this information to the Information Technology service provider for inclusion in the
Department of Defense Information Assurance Certification and Accreditation (DIACAP)
package. The Army Chief Information Office (CIO)/G-6 PIA Team has reviewed your
PIA for Contractor Manpower Report Application; it has been verified that no PII
is collected, maintained, used, or disseminated for this system.
3. IAW Department of Defense Instruction 5400.16, the Army CIO/G-6 will continue to
sign PIAs that contain PII. PIAs with no PII will be signed by the Army CIO/G-6,
Governance, Acquisition, and Chief Knowledge Office (GA&CKO), Branch Chief
Privacy and Effects Assessment.

SAIS-GKP
SUBJECT: Privacy Impact Assessment (PIA) DD Form 2930 with no Personally
Identifiable Information (PII)
4. This memorandum will:
a. Serve as confirmation of PII threshold assessment for the system and verification
that there is no PII is collected, maintained, used, or disseminated,
b. Become part of the DIACAP accreditation package, and
c. Become void if there are any major system modifications; such as system
functionality and type of PII collected. Also the PIA must be reviewed during the
reaccreditation process and a new PIA must be submitted.
5. A PIA is required prior to upgrading, developing, or purchasing new DoD information
systems and electronic collections systems including those supported through contracts
with external sources that collect, maintain, use, or disseminate PII about members of
the public, Federal personnel, contractors, or in some cases foreign nationals.
6. The points of contact for PIA completions and submissions are Ms. Cathy Cowan,
703) 545-1476; and Ms. Sheila Houston, (703) 545-1573. Inquiries may also be
forwarded to the PIA Team at [email protected].

Encl

DIXON.CYNTHIA.K.
1119775333
CYNTHIA K. DIXON
Privacy Branch Chief

2

Digitally signed by DIXON.CYNTHIA.K.1119775333
DN: c=US, o=U.S. Government, ou=DoD, ou=PKI,
ou=USA, cn=DIXON.CYNTHIA.K.1119775333
Date: 2011.04.27 14:46:52 -04'00'