This memorandum provides agencies with specific implementation guidance for conducting PIAs and developing website privacy policies. It applies to all executive branch agencies and departments, contractors and cross-agency initiatives that use websites or other information technology for interacting with the public. It requires agencies to: conduct PIAs and make them publicly available; post privacy policies on agency websites; translate privacy policies into a standardized machine-readable format; ensure privacy responsibilities are properly executed for information in identifiable form (IIF) processed by information technology; report annually to OMB on Section 208 compliance.

Link to text of: OMB Memorandum M-03-22

Associated law(s): Privacy Act