Skip to main content
Browse requirements
X-CUI-PRVCY Informational

Protect Privacy CUI and Sensitive PII

Official citation: Privacy Act (5 USC 552a)

Class: informational · Severity: medium

Requirement text

Privacy Act (5 USC 552a)

What it means

Privacy CUI and sensitive PII require protection under the Privacy Act and related guidance. 5 USC 552a governs federal records about individuals, and contractors operating systems of records inherit those duties. Sensitive PII (e.g., SSNs) warrants stronger controls.

Required by

  • — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • IT/Cloud — Privacy Act (5 USC 552a)
  • — Privacy Act (5 USC 552a)
  • Legal — Privacy Act (5 USC 552a)
  • Ag/Food — Privacy Act (5 USC 552a)
  • GovCon — Privacy Act (5 USC 552a)

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.