Privacy, Civil Rights, and Civil Liberties Protection Framework
In order to participate in the ISE, the Intelligence Reform and Terrorism Prevention Act of 2004, as amended, requires Federal departments and agencies as well as non-Federal partners to implement protections "at least as comprehensive as" the ISE Privacy Guidelines. The ISE Privacy Guidelines maintain and build upon existing privacy protections, while continuing to enhance the sharing of terrorism and homeland security-related information. The ISE is envisioned as a trusted partnership of agencies at all levels of government and the private sector. There is no inherent conflict between sharing information and protecting privacy. Without privacy and civil liberties protections, sharing is not possible; and without sharing, protection loses its relevance.
The ISE Privacy Guidelines establish a robust protection framework for privacy, civil rights, and civil liberties. Federal and non-federal agencies implement these guidelines by:
- Developing and adopting written privacy policies;
- Designating Privacy Officers responsible for ensuring compliance with privacy laws and regulations;
- Providing annual training on privacy, civil rights, and civil liberties protections;
- Ensuring that privacy protections are integrated into business processes, systems, and information sharing agreements; and
- Engaging in local outreach and collaboration with community and privacy and civil liberties groups to foster transparency and trust.
The Privacy and Civil Liberties Subcommittee of the Information Sharing and Access Interagency Policy Committee (ISA IPC), the successor to the ISE Privacy Guidelines Committee (PGC), serves as a resource to Federal departments and agencies and information sharing partners for the implementation of this privacy, civil rights, and civil liberties framework.
A number of resource documents have been developed for Federal agencies, fusion centers, State and local governments, and other non-Federal entities to assist with the developing and implementation of the privacy, civil rights, and civil liberties protection framework.