id: "PT-06(01)" title: "Routine Uses" family: "PT" family_name: "PII Processing and Transparency" sort_id: "pt-06.01" priority: "P2" implementation_level: "organization" parent: "PT-06" enhancement: True


Statement

Review all routine uses published in the system of records notice at {{ insert: param, pt-06.01_odp }} to ensure continued accuracy, and to ensure that routine uses continue to be compatible with the purpose for which the information was collected.

Guidance

A PRIVACT routine use is a particular kind of disclosure of a record outside of the federal agency maintaining the system of records. A routine use is an exception to the PRIVACT prohibition on the disclosure of a record in a system of records without the prior written consent of the individual to whom the record pertains. To qualify as a routine use, the disclosure must be for a purpose that is compatible with the purpose for which the information was originally collected. The PRIVACT requires agencies to describe each routine use of the records maintained in the system of records, including the categories of users of the records and the purpose of the use. Agencies may only establish routine uses by explicitly publishing them in the relevant system of records notice.

Assessment Objective

all routine uses published in the system of records notice are reviewed {{ insert: param, pt-06.01_odp }} to ensure continued accuracy, and to ensure that routine uses continue to be compatible with the purpose for which the information was collected.

Personally identifiable information processing and transparency policy and procedures

privacy notice

Privacy Act system of records

privacy plan

other relevant documents or records

Organizational personnel with personally identifiable information processing and transparency responsibilities

organizational personnel with information security and privacy responsibilities

Organizational processes for reviewing system of records notices