---

id: "PM-20" title: "Dissemination of Privacy Program Information" family: "PM" family_name: "Program Management" sort_id: "pm-20" priority: "P1" implementation_level: "organization" enhancements: - pm-20.1

---

Statement

Maintain a central resource webpage on the organization’s principal public website that serves as a central source of information about the organization’s privacy program and that:

Ensures that the public has access to information about organizational privacy activities and can communicate with its senior agency official for privacy;

Ensures that organizational privacy practices and reports are publicly available; and

Employs publicly facing email addresses and/or phone lines to enable the public to provide feedback and/or direct questions to privacy offices regarding privacy practices.

Guidance

For federal agencies, the webpage is located at www.[agency].gov/privacy. Federal agencies include public privacy impact assessments, system of records notices, computer matching notices and agreements, PRIVACT exemption and implementation rules, privacy reports, privacy policies, instructions for individuals making an access or amendment request, email addresses for questions/complaints, blogs, and periodic publications.

Assessment Objective: a central resource webpage is maintained on the organization’s principal public website;

Assessment Objective: the webpage serves as a central source of information about the organization’s privacy program;

Assessment Objective: the webpage ensures that the public has access to information about organizational privacy activities;

Assessment Objective: the webpage ensures that the public can communicate with its senior agency official for privacy;

Assessment Objective: the webpage ensures that organizational privacy practices are publicly available;

Assessment Objective: the webpage ensures that organizational privacy reports are publicly available;

Assessment Objective: the webpage employs publicly facing email addresses and/or phone numbers to enable the public to provide feedback and/or direct questions to privacy offices regarding privacy practices.

Public website

publicly posted privacy program documents, including policies, procedures, plans, and reports

position description of the senior agency official for privacy

public privacy notices, including Federal Register notices

privacy impact assessments

privacy risk assessments

Privacy Act statements and system of records notices

computer matching agreements and notices

other relevant documents or records

Organizational personnel with privacy program information dissemination responsibilities

organizational personnel with privacy responsibilities

Location, access, availability, and functionality of privacy resource webpage