A. Develop an internal privacy program communication plan to describe how privacy issues will be disseminated and best practices will be shared. B. Implement the communication plan

Develop a dedicated budget to address Privacy Office training needs and initiatives

Update all privacy guidance to reflect current Federal requirements and processes.

Implement a formal process for the Privacy Office to issue and communicate privacy guidance, requirements, and deadlines.

Update and continue to maintain a central collaboration area to include all current privacy program policies, procedures, and guidance

Establish standard processes to ensure consistent work flow and communications between program office and Privacy Office personnel

Ensure role-based privacy training is provided to all personnel with privacy responsibilities

Ensure privacy awareness training is provided to all contractor and third party personnel

Provide personnel tasked with handling Privacy Act requests with recurring training on Privacy Act exceptions

Establish documentation procedures for accounting of disclosures made under the Privacy Act, as required by 5 USC 552a(c)

Establish an annual computer matching activity reporting process to meet the requirements of OMB Circular A-108

Determine if general support system privacy threshold assessments or privacy impact assessments should be completed; if not, document the rationale

Develop the technical capability to identify, inventory, and monitor the existence of PII within the HUD environment

Develop and implement a process to inventory all agency PII holdings not less than annually.

Renew the PII minimization effort, to include a prioritization by the SAOP of specific minimization initiatives

Require all system owners to review the records retention practices for each information system and take any corrective actions necessary to ensure adherence to the applicable records retention schedule

A. Issue a clean desk policy prohibiting unattended and unsecured sensitive data in workplaces. B. Implement procedures to enforce the clean desk policy.

Develop and issue a departmentwide policy that notes that radon is a radioactive substance and outlines HUD's requirements to test for and mitigate excessive radon levels in accordance with 24 CFR 50.3(i)(1) and 58.5(i)(2)(i). Corrective Action Taken None Given.

Develop and provide training for applicable program staff, grantees, and PHAs on radon testing and mitigation requirements.

Update the current Multifamily radon policy to ensure that program activities comply with the departmentwide policy on radon testing and mitigation requirements.