id: "PM-19" title: "Privacy Program Leadership Role" family: "PM" family_name: "Program Management" sort_id: "pm-19" priority: "P1" implementation_level: "organization"
Statement
Appoint a senior agency official for privacy with the authority, mission, accountability, and resources to coordinate, develop, and implement, applicable privacy requirements and manage privacy risks through the organization-wide privacy program.
Guidance
The privacy officer is an organizational official. For federal agencies—as defined by applicable laws, executive orders, directives, regulations, policies, standards, and guidelines—this official is designated as the senior agency official for privacy. Organizations may also refer to this official as the chief privacy officer. The senior agency official for privacy also has roles on the data management board (see PM-23 ) and the data integrity board (see PM-24).
Assessment Objective: a senior agency official for privacy with authority, mission, accountability, and resources is appointed;
Assessment Objective: the senior agency official for privacy coordinates applicable privacy requirements;
Assessment Objective: the senior agency official for privacy develops applicable privacy requirements;
Assessment Objective: the senior agency official for privacy implements applicable privacy requirements;
Assessment Objective: the senior agency official for privacy manages privacy risks through the organization-wide privacy program.
Privacy program documents, including policies, procedures, plans, and reports
public privacy notices, including Federal Register notices
privacy impact assessments
privacy risk assessments
Privacy Act statements
system of records notices
computer matching agreements and notices
contracts, information sharing agreements, and memoranda of understanding
governing requirements, including laws, executive orders, regulations, standards, and guidance
other relevant documents or records
Organizational personnel with privacy program planning and plan implementation responsibilities
organizational personnel with privacy responsibilities
senior agency official for privacy
privacy officials