X-CUI-PRVCY Informational
Protect Privacy CUI and Sensitive PII
Official citation: Privacy Act (5 USC 552a)
Class: informational · Severity: medium
Requirement text
Privacy Act (5 USC 552a)
What it means
Privacy CUI and sensitive PII require protection under the Privacy Act and related guidance. 5 USC 552a governs federal records about individuals, and contractors operating systems of records inherit those duties. Sensitive PII (e.g., SSNs) warrants stronger controls.
Required by
- — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- IT/Cloud — Privacy Act (5 USC 552a)
- — Privacy Act (5 USC 552a)
- Legal — Privacy Act (5 USC 552a)
- Ag/Food — Privacy Act (5 USC 552a)
- GovCon — Privacy Act (5 USC 552a)
Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.