Privacy Compliance Process

The DOJ Office of Privacy and Civil Liberties has released several documents used in the Department's privacy compliance process

The Initial Privacy Assessment (IPA) is used to determine what compliance steps are required, such as a System of Records Notice (SORN) or a Privacy Impact Assessment (PIA).

The Privacy Impact Assessment is an analysis of how personally identifiable information is collected, used, shared, maintained, and protected.

A System of Records Notice provides notice to the public of the existence and character of a group of records, from which an agency retrieves information by name or another personal identifier.

Below are links to DOJ’s IPA template, PIA template, and published PIAs and SORNs:

• Initial Privacy Assessment Template
• Privacy Impact Assessment Template
• Published Privacy Impact Assessments
• Published System of Records Notices