OMB Memorandum M-99-18

On June 2, 1999, OMB issued OMB Memorandum M-99-18 directing agencies to post privacy policies on their principal websites by September 1, 1999. The memorandum also directed agencies to add privacy policies to any known major entry points, as well as to any Web page where substantial personal information is collected from the public by December 1, 1999.

The OMB memorandum states “each privacy policy must inform visitors to the site of the following: (1) what information the agency is collecting about individuals; (2) why the agency is collecting the information; and (3) how the agency will use the information.” The OMB memorandum also states that privacy policies must be clearly labeled and easily accessed when an individual visits a website.

The OMB memorandum states “federal agencies must protect an individual’s right to privacy when they collect personal information which is required by the Privacy Act and OMB Circular No. A-130.” The memorandum also states “new information technologies offer exciting possibilities for improving the quality and efficiency of government service to the American people” and further states “we cannot realize the potential of the Web until people are confident we protect their privacy when they visit our sites.” The memorandum informed agencies that it was attaching guidance containing model privacy language to assist them in reviewing their existing privacy policies or to use in creating privacy policies.