Privacy Impact Assessments are required by the E-Government Act of 2002 and are used to identify and mitigate privacy risks in information technology systems, projects, and programs.

A privacy impact assessment is:

  • An analysis of what Personally Identifiable Information is being collected.
  • Why the Personally Identifiable Information is being collected.
  • How the Personally Identifiable Information will be collected, used, accessed, shared, safeguarded and stored.

Privacy Impact Assessments are consistently reviewed to ensure they are accurate and up to date.

Below is a list of VA Privacy Impact Assessments:

All files are PDF