HHS Machine-Readable Privacy Policy Guide - Substance Abuse ...

Table of Contents
Machine-Readable Privacy Policy Guide
US Department of Health and Human Services
Table of Contents .......................................................................................... i
Preface.........................................................................................................iv
Document Change History .............................................................................v
1. Introduction....................................................................................... 6
1.1 Purpose .............................................................................................6
1.2 Background........................................................................................6
1.3 Scope................................................................................................7
1.4 Document Organization .......................................................................7
2. Federal Privacy Requirements............................................................ 8
2.1 Federal Statutes .................................................................................8
2.1.1 The Privacy Act of 1974 .............................................................8
2.1.2 The E-Government Act of 2002...................................................8
2.1.3 The Children’s Online Privacy Protection Act of 1998 .....................9
2.1.4 The Clinger-Cohen Act of 1996 ...................................................9
2.1.5 The Health Insurance Portability and Accountability Act of 1996 .....9
2.1.6 The Paperwork Reduction Act of 1995........................................ 10
2.1.7 The Computer Matching and Privacy Protection Act of 1988.......... 10
2.1.8 The Freedom of Information Act of 1966.................................... 10
2.1.9 The Federal Data Quality Act .................................................... 11
2.2 Federal Memoranda and Other Guidance.............................................. 11
2.2.1 Federal Register Vol. 67, No. 36 ............................................... 11
2.2.2 OMB Memorandum M-05-04..................................................... 11
2.2.3 OMB Circular A-130, Appendix III ............................................. 12
2.2.4 OMB Circular A-11 .................................................................. 12
2.2.5 OMB Memorandum M-03-22..................................................... 13
2.2.6 OMB Memorandum 01-05 ........................................................ 13
2.2.7 OMB Memorandum 99-18 ........................................................ 14
2.2.8 OMB Memorandum 00-13 ........................................................ 14
3. Machine-Readable Privacy Policy Roles and Responsibilities.............15
3.1 Headquarters Level ........................................................................... 15
3.1.1 HHS CIO ................................................................................ 15
3.1.2 HHS Chief Security Officer (CSO) .............................................. 15
3.1.3 HHS Web Management Team ................................................... 15
3.1.4 HHS Privacy Advocate ............................................................. 16
3.1.5 HHS Privacy Act Officer............................................................ 16
3.1.6 HHS Office of Information Resources Management (OIRM),
Information Collection Clearance Staff .................................................... 16
3.2 OPDIV Level ..................................................................................... 16
3.2.1 OPDIV Heads/Management Officials .......................................... 16
3.2.2 OPDIV CIOs ........................................................................... 17
3.2.3 OPDIV ISSOs.......................................................................... 17
Page i