U.S. flag

An official website of the United States government Here’s how you know

The .gov means it’s official.

Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

The site is secure.

The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

2018-OE-0001-11
Status
Cerrado
Date Issued
Septiembre 13, 2018
Closed Date
Mayo 22, 2020
Implement a formal process for the Privacy Office to issue and communicate privacy guidance, requirements, and deadlines.
OIG Component Office
Evaluation
Program Office
Office of Administration
Questioned Costs
$0.00
Better Funds Use
$0.00
Prioridad
No
Sensitive
No

Publication Report

2018-OE-0001 | Septiembre 13, 2018

HUD Privacy Program Evaluation Report

Related Recommendations

Key Details
(mouse over or click items for details]
  Open
  Closed
Funds Put to Better Use
Funds Put to Better Use

Recommendations that funds be put to better use estimate funds that could be used more efficiently. For example, recommendations that funds be put to better use could result in reductions in spending, deobligation of funds, or avoidance of unnecessary spending.

Questioned Costs
Questioned Costs

Recommendations with questioned costs identify costs: (A] resulting from an alleged violation of a law, regulation, contract, grant, or other document or agreement governing the use of Federal funds; (B] that are not supported by adequate documentation (also known as an unsupported cost]; or (C] that appear unnecessary or unreasonable.

Sensitive
Sensitive

Sensitive information refers to information that could have a damaging import if released to the public and, therefore, must be restricted from public disclosure.

Priority
Priority

We believe these open recommendations, if implemented, will have the greatest impact on helping HUD achieve its mission to create strong, sustainable, inclusive communities and quality affordable homes for all.

Office of Administration

  • Closed on Septiembre 25, 2020

    Summary

    Ensure the privacy program is staffed with experienced personnel (such as a Chief Privacy Officer) to manage the operational aspects of the program.

  • Closed on Agosto 13, 2020

    Summary

    Issue a notice at the Secretary level delegating and clarifying the authority and responsibilities of the SAOP and Privacy Office

  • Closed on Enero 10, 2023

    Summary

    A. Document the roles and specific responsibilities of all positions assigned privacy responsibilities. B. Communicate these responsibilities on a recurring basis, at least annually, to individuals holding these positions.

  • Summary

    Implement thorough human capital processes to ensure execution of the HUD privacy program and all its requirements

  • Closed on Junio 25, 2020

    Summary

    Finalize and approve the draft privacy program strategic plan

  • Closed on Noviembre 18, 2021

    Summary

    Ensure the privacy program is integrated with the enterprise risk program and that privacy risks are incorporated into the agency risk management process

  • Closed on Mayo 22, 2020

    Summary

    Establish an executive leadership dashboard to communicate continuous monitoring of key program risks and issues

  • Closed on Mayo 22, 2020

    Summary

    A. Develop an internal privacy program communication plan to describe how privacy issues will be disseminated and best practices will be shared. B. Implement the communication plan

  • Closed on Octubre 01, 2021

    Summary

    Develop a dedicated budget to address Privacy Office training needs and initiatives

  • Closed on Diciembre 09, 2021

    Summary

    Update all privacy guidance to reflect current Federal requirements and processes.

  • Closed on Septiembre 17, 2020

    Summary

    Update and continue to maintain a central collaboration area to include all current privacy program policies, procedures, and guidance

  • Closed on Mayo 22, 2020

    Summary

    Establish standard processes to ensure consistent work flow and communications between program office and Privacy Office personnel

  • Summary

    Ensure role-based privacy training is provided to all personnel with privacy responsibilities

  • Summary

    Ensure privacy awareness training is provided to all contractor and third party personnel

  • Closed on Agosto 13, 2020

    Summary

    Provide personnel tasked with handling Privacy Act requests with recurring training on Privacy Act exceptions

  • Closed on Septiembre 17, 2020

    Summary

    Establish documentation procedures for accounting of disclosures made under the Privacy Act, as required by 5 USC 552a(c)

  • Closed on Septiembre 17, 2020

    Summary

    Establish an annual computer matching activity reporting process to meet the requirements of OMB Circular A-108

  • Closed on Abril 08, 2021

    Summary

    Determine if general support system privacy threshold assessments or privacy impact assessments should be completed; if not, document the rationale

  • Summary

    Develop the technical capability to identify, inventory, and monitor the existence of PII within the HUD environment

  • Summary

    Develop and implement a process to inventory all agency PII holdings not less than annually.

  • Closed on Noviembre 19, 2020

    Summary

    Renew the PII minimization effort, to include a prioritization by the SAOP of specific minimization initiatives

  • Closed on Julio 01, 2021

    Summary

    Require all system owners to review the records retention practices for each information system and take any corrective actions necessary to ensure adherence to the applicable records retention schedule

  • Closed on Diciembre 31, 2020

    Summary

    A. Issue a clean desk policy prohibiting unattended and unsecured sensitive data in workplaces. B. Implement procedures to enforce the clean desk policy.