NASA Procedural Requirements

NPR 1382.1B Effective Date: July 26, 2022 Expiration Date: July 26, 2027

Subject: NASA Privacy Procedural Requirements

Responsible Office: Office of the Chief Information Officer

Appendix D. References

D.1 Applicability to National Security Systems, 40 U.S.C. § 11103(a).

D.2 Management and Promotion of Electronic Government Services, 44 U.S.C. § 3601.

D.3 OMB Memorandum M-05-08, Designation of Senior Agency Officials for Privacy (02/11/2005).

D.4 OMB Memorandum M-21-04, Modernizing Access to and Consent for Disclosure of Records Subject to the Privacy Act (November 12, 2020).

D.5 OMB Memorandum M-24-11, Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence (March 28, 2024).

D.7 NIST SP 800-60, Guide for Mapping Types of Information and Information Systems to Security Categories.

D.6 NIST SP 800-122, Guide for Protecting the Confidentiality of Personally Identifiable Information (PII).

D.7 NPR 8000.4, Agency Risk Management Procedural Requirements.

D.8 ITS-HBK-1382.03-01, Privacy - Collections, PTAs, and PIAs

D.9 ITS-HBK-1382.03-02, Privacy Annual Reporting Procedures: Reviewing and Reducing PII and D.10 Unnecessary Use of SSN.

D.11 ITS-HBK-1382.04, Privacy and Cybersecurity Controls Framework.

D.12 ITS-HBK-1382.05, Privacy Incident Response and Management: Breach Response Team Checklist.

D.13 ITS-HBK-1382.06, Web Privacy Notices and Redress.

D.14 ITS-HBK-2810.03, Planning.

D.15 ITS-HBK-2810.06, Cybersecurity and Privacy Awareness, Training, and Education.

D.16 ITS-HBK-2810.09-01, Incident Response and Management: Control Family.

d.17 ITS-HBK-2810.09-02, Incident Response and Management: NASA Information Security Incident Management.

D.18 ITS-HBK-2810.11, Media Protection and Sanitization.

| TOC | ChangeLog | Preface | Chapter1 | Chapter2 | Chapter3 | Chapter4 | Chapter5 | Chapter6 | AppendixA | AppendixB | AppendixC | AppendixD | ALL |

| NODIS Library | Organization and Administration(1000s) | Search |

DISTRIBUTION:
NODIS

This document does not bind the public, except as authorized by law or as incorporated into a contract. This document is uncontrolled when printed. Check the NASA Online Directives Information System (NODIS) Library to verify that this is the correct version before use: https://nodis3.gsfc.nasa.gov.