U--Intent to Sole Source CIPP/G Training

Conduct Certification Foundation and Government Sector Specialization Training to cover elementary concepts of privacy and data protection from a global perspective. This in-person certification training course covers: " Common principles and approaches to privacy " Jurisdictions and industries " Information Security: safeguarding personal information " Online privacy: using personal information on websites and with other Internet-related technologies " Government Agencies requirements & specializations as compared and contrasted to other industry sectors Task 1) Day 1 of 2 - Instructor will provided instructional materials for CIPP/G Fundamentals instruction and provide classroom teaching - at recipients work location in VA leased space in the Franklin Templeton building in St. Petersburg, FL the week of September 8th, 2014 Task 2) Day 1 of 2 - Fundamentals instruction to include the following topical outline: I. Introduction to the U.S. Privacy Environment A. Structure of U.S. Law a. Branches of government b. Sources of law c. Legal definitions d. Regulatory authorities e. Understanding laws B. Enforcement of U.S. Privacy and Security Laws a. Criminal versus civil liability b. General theories of legal liability c. Negligence d. Unfair and deceptive trade practices (UDTP) e. Federal enforcement actions f. State enforcement (Attorneys General (AGs), etc.) g. Cross-border enforcement issues (Global Privacy Enforcement Network (GPEN)) h. Self-regulatory enforcement (PCI, Trust Marks) C. Information Management from a U.S. Perspective a. Data classification b. Privacy program development c. Incident response programs d. Training e. Accountability f. Data retention and disposal (FACTA) g. Vendor management h. International data transfers II. Limits on Private-sector Collection and Use of Data A. Cross-sector FTC Privacy Protection a. The Federal Trade Commission Act b. FTC Privacy Enforcement Actions c. FTC Security Enforcement Actions d. The Children's Online Privacy Protection Act of 1998 (COPPA) B. Medical a. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) b. Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 C. Financial a. The Fair Credit Reporting Act of 1970 (FCRA) b. The Fair and Accurate Credit Transactions Act of 2003 (FACTA) c. The Financial Services Modernization Act of 1999 ("Gramm-Leach-Bliley" or GLBA) d. Red Flags Rule e. Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 f. Consumer Financial Protection Bureau D. Education a. Family Educational Rights and Privacy Act of 1974 (FERPA) E. Telecommunications and Marketing a. Telemarketing sales rule (TSR) and the Telephone Consumer Protection Act of 1991 (TCPA) b. Combating the Assault of Non-solicited Pornography and Marketing Act of 2003 (CAN-SPAM) c. The Junk Fax Prevention Act of 2005 (JFPA) d. The Wireless Domain Registry e. Telecommunications Act of 1996 and Customer Proprietary Network Information f. Video Privacy Protection Act of 1988 (VPPA) g. Cable Communications Privacy Act of 1984 III. Government and Court Access to Private-sector Information A. Law Enforcement and Privacy a. Access to financial data b. Access to communications c. The Communications Assistance to Law Enforcement Act (CALEA) B. National Security and Privacy a. Foreign Intelligence Surveillance Act of 1978 (FISA) b. Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct C. Civil Litigation and Privacy a. Compelled disclosure of media information b. Electronic discovery IV. Workplace Privacy A. Introduction to Workplace Privacy a. Workplace privacy concepts b. U.S. agencies regulating workplace privacy issues c. U.S. Anti-discrimination laws B. Privacy before, during and after employment a. Employee background screening b. Employee monitoring c. Investigation of employee misconduct d. Termination of the employment relationship V. State Privacy Laws A. Federal vs. state authority B. Marketing laws C. Financial Data a. Credit history b. California SB-1 D. Data Security Laws a. SSN b. Data destruction E. Data Breach Notification Laws a. Elements of state data breach notification laws b. Key differences among states today Task 3) Day 1 of 2 - at conclusion of the fundamentals instruction on day 1, instructor will administer and proctor a practice test; review testing results; and provide appropriate feedback to the students to complete their certifications. " The CIPP/G addresses U.S. government privacy laws, regulations and policies specific to government practice as well as those more broadly applicable to the public and private sectors in the U.S. It also covers U.S. government-standard practices for privacy program development and management, privacy compliance and auditing, records management and agency reporting obligations for privacy. Subject matter areas include: " U.S. laws that compel the disclosure of personal data: BSA, FISA, ECPA and USA-PATRIOT " U.S. private sector privacy laws that exert certain requirements on U.S. government organizations: HIPAA, COPPA and GLBA " Information laws for U.S. government practice: FOIA, FISMA, the Privacy Act of 1974, the Government in the Sunshine Act, the E-Government Act and the Data Quality Act " Key privacy memoranda published by OMB and OPM: M-01-05, M-03-22, M-04-26, M-05-08, M-06-15, M-06-16 M-06-19 and Circular A-130 " Program controls for U.S. government privacy professionals such as PIAs and SORNs Task 4) Day 1 of 2 - Instructor will provide each class participant with necessary vouchers to take any necessary CIPP Fundamentals certification examination(s) at a national testing facility nearest to each participant's duty station. Task 5) Day 2 of 2 - Instructor will provide instructional materials for CIPP/G Government Specializations instruction and provide classroom instruction at recipients work location in VA leased space in the Franklin Templeton building in St. Petersburg, FL the week of September 8th, 2014 Task 6) Day 2 of 2 - Government Specialization instruction to include the following topical outline: I. U.S. Government Privacy Laws A. Privacy Definitions and Principles a. Privacy Definitions b. Privacy Basics c. Fair Information Practice Principles B. The Privacy Act and the E-Government Act a. The Privacy Act of 1974 (as amended) b. System of Records Notice (SORN) C. Other Laws and Regulations Affecting U.S. Government Privacy Practice a. Consolidated Appropriations Act of 2005 b. The Federal Information Security Management Act of 2002 (FISMA) D. Privacy and the Federal Government Intelligence Community a. The Federal Intelligence Community and the Information Sharing Environment (ISE) E. Other Federal Information Privacy Laws and Authorities Affecting Government Practice a. Laws affecting both the public and private sectors b. Laws Limiting Government Access II. U.S. Government Privacy Practices A. Privacy Program Management and Organization a. Program development b. Program management c. Federal agency responsibilities d. Protecting PII e. U.S. Government workforce management B. Records Management a. Management Process b. Record retention c. Inter-agency sharing of personal data d. Common Rule for Protection of Human Subjects e. Disclosure of PII for statistical or research purposes C. Auditing and Compliance Monitoring a. Auditing b. Compliance monitoring and reporting Task 7) Day 2 of 2 - at conclusion of the Government Specialization instruction on day 2, instructor will administer and proctor a practice test; review testing results; and provide appropriate feedback to the students to complete their certifications. Task 8) Day 2 of 2 - Instructor will provide each class participant with necessary vouchers to take CIPP - G Government Specialization certification examination(s) at a national testing facility nearest to each participant's duty station. Instructor will provide any necessary closing wrap-up discussion at the conclusion of the training. Task 9) Days 1 & 2 - Instructor will travel to VA leased space in the Franklin Templeton building in St. Petersburg, FL for this 2-day training exercise and lodge as necessary to successfully and fully instruct and prepare VA students to achieve CIPP/G Fundamentals and Government Specialization Certifications.