Deadline for Web privacy policies looms
Agencies have three weeks to beef up their Web site privacy policies as required under the E-Government Act of 2002.
By Dec. 15, agencies’ online privacy policies must inform visitors:If providing information is voluntary and detail how information will be usedHow to grant consent for use of voluntary information How to grant consent for use of mandatory information if the agency has plans beyond legally mandated requirements.
Agencies also must notify site users of their rights under the Privacy Act and other privacy laws and detail any use of tracking technology, such as session cookies, or applications that let users customize their version of a site.
Kleederman said more and more agencies are allowing site customization, and many use tracking technology applications.
Finally, each agency must submit to OMB a list of privacy impact assessments they have done of IT projects. Agencies had to include the assessments with their fiscal 2005 budget submissions (Click for Sept. 30 GCN story)
OMB anticipates the inventory will identify several hundred assessments that the agency can use to get an overview of privacy projects and trends, Kleederman said.
“Our analysis will be included in our report to Congress on how we are meeting the requirements of the E-Government Act,” she said.
Connect with the GCN staff on Twitter @GCNtech.