Sending Sensitive PII Outside of DHS

Transcript:

Privacy Man: You get a phone call from one of your fraud investigators requesting Ms. Smith’s claim file. He wants to give it one of his law enforcement contacts at the local Police Department. You should know that the Privacy Act prohibits disclosing personal information outside the agency without written permission from Ms. Smith, unless an exception applies.

What should you do? To answer the scenario, open the Handbook for Safeguarding Sensitive PII at DHS and go to page 8, Minimize Proliferation of Sensitive PII.

Knowledge Check

What should you do? To answer the scenario, open the Handbook for Safeguarding Sensitive PII at DHS and go to page 14.

A. Ask the fraud investigator why the claim file needs to go to the Police Department so you can confirm that a "routine use" has been published in a System of Records Notice (SORN) that would permit sharing the information.
B. Tell the fraud investigator that the law enforcement contact must provide a written request signed by his section chief specifying the particular portion of the claim file that is needed, and the law enforcement activity for which the data is sought.
C. Send the claim file to the fraud investigator since he’s trustworthy and seems to know what he’s doing.
D. First a., and then b. if there is no routine use that would cover the disclosure outside your agency.

Last Published Date: March 22, 2021

You are here

Sending Sensitive PII Outside of DHS

Transcript:

Knowledge Check

Privacy at DHS

Privacy at DHS

Was this page helpful?