Requirement: Federal Public Web sites Must Comply with Privacy Requirements

Requirement:  Federal Public Web sites Must Comply with Privacy Requirements. All federal public web sites must comply with existing laws and directives that address the need to protect the privacy of the American people when they interact with their government. Some of the key requirements for federal public web sites include: (1) conducting privacy impact assessments; (2) posting privacy policies on each web site; (3) posting a “Privacy Act Statement” that tells visitors the organization’s legal authority for collecting personal data and how the data will be used; and (4) translating privacy policies into a standardized machine-readable format.  Organizations should review the following laws and regulations related to privacy protections to ensure that their public web sites meet the full range of requirements:

• OMB Memorandum 03-22, OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002: http://www.whitehouse.gov/omb/memoranda/m03-22.html
• E-Government Act of 2002, Section 207(f)(1)(B): http://www.archives.gov/about_us/basic_laws_and_authorities/egov_act_section_207.html
• Privacy Act of 1974: http://www.usdoj.gov/foia/privstat.htm
• OMB Circular A-130, App 1: http://www.whitehouse.gov/omb/circulars/a130/a130appendix_i.html
• Children’s Online Privacy Protection Act of 1998 (COPPA): http://www.ftc.gov/ogc/coppa1.htm