DM3515-000 USDA Privacy Requirements

PRIVACY REQUIREMENTS
DM 3515-000
TABLE OF CONTENTS
Page
Chapter 3 – General Information
1
2
3
4
5

Purpose
Cancellation
References
Scope
Abbreviations

1
1
1
2
2

3515-001
Part I – Collection of Web Site Cookies and Privacy Requirements
1
2
3

Background
Policy
Responsibilities

1
1
3

3515-002
Part 2 - Privacy Impact Assessment (PIA)
1
2
3

Background
Policy
Procedures

Attachments
1
2

Steps For Completing a PIA
Privacy Impact Assessment Form

1
2
3

February 17, 2005

DM 3515-000

U.S. Department of Agriculture
Washington, D.C.

DEPARTMENTAL MANUAL
SUBJECT:

DATE:

Privacy Requirements

OPI:

NUMBER:

3515-000

February 17, 2005
OCIO, Cyber Security

CHAPTER 3
GENERAL INFORMATION
1

PURPOSE
This Departmental Manual chapter establishes security policy and
procedures for privacy within USDA. Specifically, Part 1 of this
chapter addresses security requirements with regard to the Privacy
Act and the use of cookies at USDA Web sites. Part 2 of this
material addresses the Privacy Impact Assessment (PIA) and
implements the requirement for addressing privacy during the
systems development and revision process. In addition, the
material describes the steps required to complete a PIA on a
project, and discusses some of the privacy issues a project must
address when completing a PIA.

2

CANCELLATION
This Departmental Manual will be in effect until superseded.

3

REFERENCES
See Appendix B, CS Legal and Regulatory References
USDA Privacy Act Implementation, 7 C.F.R. 11 et seq;
USDA Freedom of Information Act Implementation, 7 C.F.R. 1.110 et
seq;

1

DM3515-000

4

February 17, 2005

SCOPE
This manual applies to all USDA agencies, programs, teams,
organizations, appointees, employees and other activities.

5

ABBREVIATIONS
CIO
CS
DM
DR
ITMRA
ISSPM
OCIO
OMB
PA
PIA
SLC
SOR
USDA
WWW

- Chief Information Officer
- Cyber Security
- Departmental Manual
- Departmental Regulation
- Information Technology Management Reform Act
- Information Systems Security Program Manager
- Office of the Chief Information Officer
- Office of Management & Budget
- Privacy Act
- Privacy Impact Assessment
- System Life Cycle
- System of Records
- United States Department of Agriculture
- World Wide Web

2