Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

This is not the current EPA website. To navigate to the current EPA website, please go to www.epa.gov. This website is historical material reflecting the EPA website as it existed on January 19, 2025. This website is no longer updated and links to external websites and some internal pages may not work. More information »

JavaScript appears to be disabled on this computer. Please click here to see any active alerts.

Privacy Policy and Procedures

Policy

Privacy Policy (pdf) (107.56 KB)
This policy establishes Agency requirements for safeguarding the collection, access, use, dissemination, and storage of personally identifiable information (PII).

Procedures

Responding to Personally Identifiable Information (PII) Breach Procedure (pdf) (696.07 KB)
This procedure identifies the steps the U.S. Environmental Protection Agency (EPA) employees will take to respond to suspected or confirmed breaches of Personally Identifiable Information (PII).

System of Records Notices (SORN) Privacy Act Procedure (pdf) (227.43 KB)
This procedure provide the instructions for preparing a System of Records Notice (SORN).

Procedures for Preparing Privacy Impact Assessments (pdf) (89.15 KB)
These procedures provide instructions for determining if personally identifiable information (PII) is collected in electronic systems.

Procedures for Preparing Privacy Act Statements (pdf) (85.79 KB)
These procedures provide instructions for developing Privacy Act Statements (PAS).

Personally Identifiable Information (PII) Incident Handling & Response Procedure (pdf) (559.3 KB)
This procedure seeks to assist Environmental Protection Agency Officials in conducting their duties in the event of a PII incident by providing practical guidance on responding to incidents effectively and efficiently via the use of a incident taxonomy.

Conducting Privacy On-Site Reviews Procedure (pdf) (153.74 KB)
The purpose of this procedure is to identify the types and frequency of privacy on-site reviews to be conducted by EPA’s National Privacy Program.

Processing Privacy Act Requests Procedure (pdf) (94.72 KB)
This procedure provides the instructions for processing requests for records contained in Agency Privacy Act systems.

Computer Matching Agreement Procedure (pdf) (563.18 KB)
Provides the process EPA uses to comply with the Computer Matching and Privacy Protection Act of 1988 and Privacy Act of 1974 requirements and participate in computer matching activities.

Protecting Sensitive Personally Identifiable Information (SPII) (pdf) (132.62 KB, December 19, 2016)
Protecting Sensitive Personally Identifiable Information (SPII)