‘‘(A) A description and assessment of the 
extent to which the proposed rule will impact 
the privacy interests of individuals, including 
the extent to which the proposed rule—
‘‘(i) provides notice of the collection of 
personally identifiable information, and 
specifies what personally identifiable infor-
mation is to be collected and how it is to 
be collected, maintained, used, and dis-
closed; 
‘‘(ii) allows access to such information 
by the person to whom the personally iden-
tifiable information pertains and provides 
an opportunity to correct inaccuracies; 
‘‘(iii) 
prevents 
such 
information, 
which is collected for one purpose, from 
being used for another purpose; and 
‘‘(iv) provides security for such infor-
mation. 
‘‘(B) A description of any significant alter-
natives to the proposed rule which accomplish 
the stated objectives of applicable statutes and 
which minimize any significant privacy impact 
of the proposed rule on individuals. 
‘‘(b) FINAL PRIVACY IMPACT ANALYSIS.—
‘‘(1) IN GENERAL.—Whenever an agency pro-
mulgates a final rule under section 553 of this title, 
after being required by that section or any other law 
to publish a general notice of proposed rulemaking, 
or promulgates a final interpretative rule involving 
the internal revenue laws of the United States, the 
agency shall prepare a final privacy impact analysis, 
signed by the senior agency official with primary re-
sponsibility for privacy policy. 
‘‘(2) CONTENTS.—Each final privacy impact 
analysis required under this subsection shall contain 
the following: 
‘‘(A) A description and assessment of the 
extent to which the final rule will impact the 
privacy interests of individuals, including the 
extent to which the proposed rule—
‘‘(i) provides notice of the collection of 
personally identifiable information, and 
specifies what personally identifiable infor-
mation is to be collected and how it is to 
be collected, maintained, used, and dis-
closed; 
‘‘(ii) allows access to such information 
by the person to whom the personally iden-
tifiable information pertains and provides 
an opportunity to correct inaccuracies; 
‘‘(iii) 
prevents 
such 
information, 
which is collected for one purpose, from 
being used for another purpose; and 
‘‘(iv) provides security for such infor-
mation. 
‘‘(B) A summary of the significant issues 
raised by the public comments in response to 
the initial privacy impact analysis, a summary 
of the assessment of the agency of such issues, 
and a statement of any changes made in the 
proposed rule as a result of such issues. 
‘‘(C) A description of the steps the agency 
has taken to minimize the significant privacy 
impact on individuals consistent with the stated 
objectives of applicable statutes, including a 
statement of the factual, policy, and legal rea-
sons for selecting the alternative adopted in the 
final rule and why each one of the other signifi-
cant alternatives to the rule considered by the 
agency which affect the privacy interests of in-
dividuals was rejected.
‘‘(3) AVAILABILITY
TO
PUBLIC.—The agency 
shall make copies of the final privacy impact anal-
ysis available to members of the public and shall 
publish in the Federal Register such analysis or a 
summary thereof. 
‘‘(c) PROCEDURE FOR WAIVER OR DELAY OF COM-
PLETION.—An agency head may waive or delay the com-
pletion of some or all of the requirements of subsections 
(a) and (b) to the same extent as the agency head may, 
under section 608, waive or delay the completion of some 
or all of the requirements of sections 603 and 604, respec-
tively. 
‘‘(d) PROCEDURES FOR GATHERING COMMENTS.—
When any rule is promulgated which may have a signifi-
cant privacy impact on individuals, or a privacy impact 
on a substantial number of individuals, the head of the 
agency promulgating the rule or the official of the agency 
with statutory responsibility for the promulgation of the 
rule shall assure that individuals have been given an op-
portunity to participate in the rulemaking for the rule 
through techniques such as—
‘‘(1) the inclusion in an advance notice of pro-
posed rulemaking, if issued, of a statement that the 
proposed rule may have a significant privacy impact 
on individuals, or a privacy impact on a substantial 
number of individuals;
‘‘(2) the publication of a general notice of pro-
posed rulemaking in publications of national circula-
tion likely to be obtained by individuals; 
‘‘(3) the direct notification of interested individ-
uals; 
‘‘(4) the conduct of open conferences or public 
hearings concerning the rule for individuals, includ-
ing soliciting and receiving comments over computer 
networks; and 
‘‘(5) the adoption or modification of agency 
procedural rules to reduce the cost or complexity of 
participation in the rulemaking by individuals. 
‘‘(e) PERIODIC REVIEW OF RULES.—
‘‘(1) IN
GENERAL.—Each agency shall carry 
out a periodic review of the rules promulgated by the 
agency that have a significant privacy impact on in-
dividuals, or a privacy impact on a substantial num-
ber of individuals. Under such periodic review, the 
agency shall determine, for each such rule, whether 
the rule can be amended or rescinded in a manner 
that minimizes any such impact while remaining in 
accordance with applicable statutes. For each such 
determination, the agency shall consider the fol-
lowing factors: 
‘‘(A) The continued need for the rule.
‘‘(B) The nature of complaints or com-
ments received from the public concerning the 
rule. 
‘‘(C) The complexity of the rule. 
‘‘(D) The extent to which the rule over-
laps, duplicates, or conflicts with other Federal 
rules, and, to the extent feasible, with State and 
local governmental rules. 
‘‘(E) The length of time since the rule was 
last reviewed under this subsection. 
‘‘(F) The degree to which technology, eco-
nomic conditions, or other factors have changed 
in the area affected by the rule since the rule 
was last reviewed under this subsection. 
‘‘(2) PLAN
REQUIRED.—Each agency shall 
carry out the periodic review required by paragraph 
(1) in accordance with a plan published by such 
agency in the Federal Register. Each such plan shall 
provide for the review under this subsection of each 
rule promulgated by the agency not later than 10 
years after the date on which such rule was pub-
lished as the final rule and, thereafter, not later 
than 10 years after the date on which such rule was 
last reviewed under this subsection. The agency may