Purpose of the Guide to Implementing Privacy:
“The purpose of the Department of Homeland Security (DHS or Department) Privacy Office Guide to Implementing Privacy (Guide) is to inform the Department, other federal agencies, and the public about how the DHS Privacy Office implements privacy at DHS. The Guide provides an overview of the DHS Privacy Office’s functions and transparency into its day-to-day operations. This guide may be particularly helpful to federal privacy practitioners, as it not only describes the wide-ranging activities of the Office, but also explains how the office works to build a privacy culture at DHS”.
The DHS FIPPs:
- Transparency: DHS should be transparent and provide notice to the individual regarding its collection, use, dissemination, and maintenance of PII.
- Individual Participation: DHS should, to the extent practical, seek individual consent for the collection, use, dissemination, and maintenance of PII and should provide mechanisms for appropriate access, correction, and redress regarding DHS’s use of PII.
- Purpose Specification: DHS should specifically articulate the authority, which permits the collection of PII and specifically articulate the purpose or purposes for which the PII is intended to be used.
- Data Minimization: DHS should only collect PII that is directly relevant and necessary to accomplish the specified purpose(s) and only retain PII for as long as is necessary to fulfill the specified purpose(s).
- Use Limitation: DHS should use PII solely for the purpose(s) specified in the notice. Sharing PII outside the Department should be for a purpose compatible with the purpose for which the PII was collected.
- Data Quality and Integrity: DHS should, to the extent practical, ensure that PII is accurate, relevant, timely, and complete, within the context of each use of the PII;
- Security: DHS should protect PII (in all forms) through appropriate security safeguards against risks such as loss, unauthorized access or use, destruction, modification, or unintended or inappropriate disclosure; and
- Accountability and Auditing: DHS should be accountable for complying with these principles, providing training to all employees and contractors who use PII, and auditing the actual use of PII to demonstrate compliance with these principles and all applicable privacy protection requirements.”
The document can be downloaded at: http://www.dhs…