US flag signifying that this is a United States Federal Government website Official website of the Department of Homeland Security

Office of Health Affairs Has Not Implemented An Effective Privacy Management Program

Executive Summary

We evaluated the Office of Health Affairs’ (OHA) privacy safeguards for protecting the personally identifiable information (PII) it collects and maintains. OHA has not implemented an effective organizational framework for safeguarding PII in accordance with Federal requirements. OHA appointed a Privacy Officer, but this official lacks adequate authority and resources to carry out the various required privacy management responsibilities. This official also has not received OHA senior leadership support to issue the policies and procedures needed for effective organization-wide privacy management. Further, there was no central tracking to ensure that all employees completed annual privacy training and to accurately report this information to the Department and Congress as required.

Report Number
OIG-18-20
Issue Date
Document File
DHS Agency
Oversight Area
Fiscal Year
2018

Would you like to take a brief survey regarding our site?