CPSC is responsible for ensuring the privacy and confidentiality of the information it collects on members of the public, business partners, and its own employees. These people have a right to expect CPSC will collect, maintain, use and disseminate identifiable personal information only as authorized by law and as necessary to carry out agency responsibilities.
Privacy Impact Assessments (PIAs) are performed on computer systems and applications in order to evaluate any risks these systems may pose to personally identifiable information.