Pub. L. 109-162, tit. XI, subtit. C, sec. 1174
PRIVACY OFFICER.
SEC. 1174. PRIVACY OFFICER. (a) In General.—The Attorney General shall designate a senior official in the Department of Justice to assume primary responsibility for privacy policy. (b) Responsibilities.—The responsibilities of such official shall include advising the Attorney General regarding—(1) appropriate privacy protections, relating to the collection, storage, use, disclosure, and security of personally identifiable information, with respect to the Department’s existing or proposed information technology and information systems; (2) privacy implications of legislative and regulatory proposals affecting the Department and involving the collection, storage, use, disclosure, and security of personally identifiable information; (3) implementation of policies and procedures, including appropriate training and auditing, to ensure the Department’s compliance with privacy-related laws and policies, including section 552a of title 5, United States Code, and Section 208 of the E-Government Act of 2002 (Public Law 107–347); (4) ensuring that adequate resources and staff are devoted to meeting the Department’s privacy-related functions and obligations; (5) appropriate notifications regarding the Department’s privacy policies and privacy-related inquiry and complaint procedures; and (6) privacy-related reports from the Department to Congress and the President. (c) Review of Privacy Related Functions, Resources, and Report.—Within 120 days of his designation, the privacy official shall prepare a comprehensive report to the Attorney General and to the Committees on the Judiciary of the House of Representatives and of the Senate, describing the organization and resources of the Department with respect to privacy and related information management functions, including access, security, and records management, assessing the Department’s current and future needs relating to information privacy issues, and making appropriate recommendations regarding the Department’s organizational structure and personnel. 119 STAT. 3125(d) Annual Report.—The privacy official shall submit a report to the Committees on the Judiciary of the House of Representatives and of the Senate on an annual basis on activities of the Department that affect privacy, including a summary of complaints of privacy violations, implementation of section 552a of title 5, United States Code, internal controls, and other relevant matters.