Enclosure (3) to COMDTINST 5260.4A
Privacy Impact Assessment (PIA) Process
The purpose of a PIA is to document at the very earliest stage of a project how new or revised
IT systems have privacy built into the fundamental architecture of the system, including
technology choices.
Will the information system do any of the following:
Create new collections of personal information on members of
the public or internal CG IT Systems
Develop or procure new technology or systems that store a
person's identity
Contain new databases or views from old databases or systems
housing personally identifiable information
Significantly altered system
Comply with Exhibit 300 Budget Process
YES
NO
See CG-611 for PIA
Advise CG-611 that
Prep Guidance.
system is exempt.
CG-611 coordinate
CG-611 will review
prep with drafter.
security issues with
CG-65 as needed.
CG-61 Forwards
PIA to DHS
Privacy Office.
DHS Privacy Office forwards to OMB for
publishing in the Federal Register. Upon OMB
approval, DHS will post on the Internet.
Previous Page
