HHS Machine-Readable Privacy Policy Guide - Substance Abuse ...

Machine-Readable Privacy Policy Guide
US Department of Health and Human Services
Assuming responsibility for ensuring that machine-readable privacy policy
responsibilities are assigned; and
Working with CIOs to ensure that resources necessary for completing IT
privacy and security tasks are allocated.
3.2.2 OPDIV CIOs
OPDIV CIOs are responsible for:
Tracking and maintaining all machine-readable privacy policies;
Reviewing completed machine-readable privacy policies and attesting that
they are adequately and accurately completed;
Ensuring that completed machine-readable privacy policies are implemented
on all applicable OPDIV websites (existing and in development);
Keeping management informed of machine-readable privacy policy resource
needs; and
Allocating proper resources to implement and maintain machine-readable
privacy policies.
3.2.3 OPDIV ISSOs
OPDIV ISSOs are responsible for:
Coordinating the completion and implementation of machine-readable
privacy policies;
Working with website owners to collect information needed to complete
machine readable privacy policies; and
Updating, at the direction of the OPDIV CIO/OPDIV management on the
progress of machine-readable privacy policy completion, which enables the
OPDIV CIO to monitor OPDIV wide progress and the effectiveness of the
machine-readable privacy policy program.
3.2.4 Website Owners and Website Administrators
Website owners and website administrators are responsible for:
Working with ISSOs, CIOs, or other staff to provide information relative to
completing machine-readable privacy policies;
Identifying any additional resources needed to complete machine-readable
privacy policies;
Implementing, testing, and maintaining machine-readable privacy policies on
existing websites and websites in development; and
Implementing, testing, and maintaining machine-readable policy reference
files on any Web server that hosts an HHS website.
3.2.5 OPDIV Privacy Contact
Page 17