2010 Follow-up Audit of Privacy and Data Protection

The importance of data protection and privacy within the Federal government and commercial enterprises is constantly increasing and requires continuous attention. The challenges will be even greater in the future as the potential use of new technologies (e.g., cloud computing, more prolific use of wireless mobile computing devices) and changes to business processes and work arrangements (e.g., increased focus on telework) will create new risks to be managed. There is also a general increasing concern among individuals about the use and privacy of their personal information controlled by Federal agencies. For any entity handling personally identifiable information (PII), the effort to sustain an effective and defensible privacy program that meets the public’s expectations and applicable legal requirements can be a substantial task.