Impact Assessments

Required by Section 208 of the E-Government Act of 2002 and OMB Memorandum 03-22, a Privacy Impact Assessment (PIA) is a decision tool and process used by the Department of Energy (DOE) to identify, assess, and mitigate privacy risks associated with information systems, programs,  projects, and other initiatives. Additionally, PIAs provide notice to the public concerning 

• What Personally Identifiable Information (PII) DOE is collecting; 
• Why the PII is being collected; and 
• How the PII will be collected, used, accessed, shared, safeguarded, and stored.

PIAs assess risk by applying the universally recognized Fair Information Practice Principles (FIPPs) to Department systems and programs. If a PIA is required, system owners will work with the Office of Privacy Management and Compliance to complete the PIA. Upon completion, the Chief Privacy Officer will review and approve the PIA.

Below is a list of DOE's public-facing PIAs. The list below is organized in alphabetical order by Departmental Element. PIAs are updated, reviewed, approved, and uploaded on a regular basis.