GSA Privacy Program

The purpose of the GSA Privacy Program is to fulfill the requirements of the Privacy Act of 1974, the E-Government Act of 2002, and related privacy rules and regulations, with the objective of striking a balance between a person's right to privacy and the federal government's need for information to carry out its responsibilities. The information on this site is intended to inform members of the public of GSA’s privacy policies and practices. 

The Act is designed to protect the individual's privacy from unwarranted invasion, to make sure that personal information in possession of federal agencies is properly used, and to prevent any potential misuse of personal information in the possession of the federal government.  GSA's program establishes the processes and procedures, and assigns responsibilities, for fulfilling the Privacy Act's mandate.

The information on this site is intended to inform members of the public of GSA's privacy policies and practices as they apply to GSA employees, contractors, and clients.

• GSA Contracting: This page describes requirements for federal government contractors who operate systems of records containing personal information.
• GSA Policy and Procedures: This page contains a guide to GSA privacy policies and procedures regarding the protection of any personal information contained in GSA’s systems of records.
• GSA Privacy Act System of Records Notices:  These notices describe the systems that GSA maintains that are subject to the Privacy Act.
• Information Security: This page outlines security requirements for GSA’s information technology systems.
• Personally Identifiable Information (PII): This page defines the term “Personally Identifiable Information” as used in GSA policy and regulations.
• Privacy Act Systems of Records:  This page describes the system for publishing notices in the Federal Register for systems of records, as required by the Privacy Act.
• Privacy Act and GSA Employees: This page provides information about the Privacy Act that is specific to employees of GSA.
• Privacy Impact Assessments: Privacy Impact Assessments (PIAs) provide analyses of privacy related issues for GSA electronic systems that contain personal information on members of the public.
• Privacy Instructional Letters and Directives:  Links to instructional letters dealing with data release and information breach policies.
• Privacy Laws and Regulations: This page describes the provisions of relevant federal privacy protection laws.
• Privacy Act System of Records Notice Format and Instructions and Sample Notice: This page provides guidance for GSA officials and associates on preparing a Privacy Act system of records notice for publication in the Federal Register.
• Training Requirements: This page describes various GSA employee training requirements.
• GSA Privacy Act Rules [PDF - 68K]: This document provides information on how to request access to, review, and amend system of records information by individuals.