S2-DES-CIOSAOP-2019, Designation to the Chief Information Officer

1. 2. 3. DEPARTMENT OF ENERGY DESIGNATION ORDER NO. 00-17.00A TO THE CHIEF INFORMATION OFFICER DESIGNATION. Under the authority vested in me as Deputy Secretary of Energy and pursuant to Office of Management and Budget {0MB) guidance in Memorandum M-16- 24, dated September 15, 2016, the Chief Information Officer {CIO) is hereby designated as the Senior Agency Official for Privacy Policy {SAOP). As the SAOP, the DOE CIO will be responsible for the following: 1.1 Policy issues on privacy matters at a national and agency level. 1.2 Maintain agency policy and evaluate legislative, regulatory, and other policy proposals with information privacy implications. 1.3 Implementation of information privacy protection, including compliance with Federal laws, regulations, and policies that relate to information privacy and the Privacy Act. 1.4 Periodic reviews to identify agency deficiencies, weaknesses, or risks related to information privacy and identification of corrective actions. 1.5 Maintenance of department-wide information privacy processes and procedures. 1.6 Provision of privacy training and education programs to include privacy laws, regulations, policies, and procedures governing the handling of personal information. 1. 7 Privacy Impact Assessments for new or significantly changed information systems. 1.8 Reporting on Departmental privacy matters as part of the Federal Information Security Management Act report to 0MB. RECISSION. DOE Designation Order 00-17.00 is hereby rescinded. LIMITATION. 3.1 This designation covers all parts of the Department of Energy, except the Federal Energy Regulatory Commission. S2-DES-CIOSAOP-2019 Diane Cross-Out 2 3.2 In exercising the designated authority in this Order, the designee shall be governed by the rules and regulations of the Department of Energy, and the policies and procedures prescribed by the Secretary or Deputy Secretary. 3.3 Nothing in this Designation shall preclude the Secretary of Energy from exercising any of his authority whenever in his judgment his exercise of such authority is necessary. 3.4 Nothing in this Order shall be construed to supersede or otherwise interfere with the authorities provided to the Administrator, National Nuclear Security Administration (NNSA} by law or by delegation. Furthermore, nothing herein constitutes authority to exercise authority, direction, or control of an employee of N NSA or its contractors. 4. AUTHORITY TO REDESIGNATE. This designation may not be redesignated or delegated. 5. DURATION AND EFFECTIVE DATE. 5.1 All actions pursuant to any authority provided prior to this Order or pursuant to any authority granted by this Order taken prior to and in effect on the date of this Order are ratified and remain in force as if taken under this Order, unless or until rescinded, amended, or superseded. 5.2 A copy of this Designation Order shall be provided to DOE's Office of Management, which manages the Secretarial Delegations of Authority System. 5.3 This Designation Order is effective HAR O 5 2019 Dan Brouillette Deputy Secretary of Energy