M-17-12, Preparing for and Responding to a Breach of Personally Identifiable Information
In effectOMB · OMB memorandum · January 3, 2017
Summary
Requires agencies to keep a breach response plan, run a breach response team led by the Senior Agency Official for Privacy, test the plan yearly, and assess risk to individuals when deciding on notification and help after a breach.
Topics
Replaces
- Recommendations for Identity Theft Related Data Breach Notification (rescinded)
- M-06-15, Safeguarding Personally Identifiable Information (rescinded)
- M-06-19, Reporting Incidents Involving Personally Identifiable Information and Incorporating the Cost for Security in Agency Information Technology Investments (rescinded)
- M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information (rescinded)
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Office of Management and Budget (OMB)
- Type
- OMB memorandum
- Number
- M-17-12
- Issued
- January 3, 2017
- Status
- In effect
Still in force, possibly with amendments.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.