Review of the FLRA’s Privacy and Data Security Policies, Procedures, and Practices for FY 2024

Submitting OIG:

Report Description:

Date Issued:

Wednesday, June 26, 2024

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

MAR-24-06

Location(s):

Agency-Wide

Type of Report:

Review

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
FLRA-FINAL-Privacy-Report-FY2024.pdf	963.12 KB

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	No
Update the Incident Response Policy to include procedures for how to respond to breaches in PII, as follows: a. A process to determine if notice to individuals or other organizations, including oversight organizations, is needed; b. An assessment process to determine the extent of the harm, embarrassment, inconvenience, or unfairness to affected individuals and any mechanisms to mitigate such harms; and c. Identification of applicable privacy requirements.
2	Open	No
Develop, document, and implement policies and procedures that address the use of personally identifiable information for internal testing, training, and research and ensure the following: a. Limit or minimize the amount of personally identifiable information used for internal testing, training, and research purposes; b. Authorize the use of personally identifiable information when such information is required for internal testing, training, and research; and c. Review and update policies and procedures.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

Open

Open

Search form