Challenges of Protecting Personal Information in an Expanding Federal Computer Network Environment

The concept of a federal computer network and the attendant benefits of economy and efficiency was recognized when the Brooks Act was enacted in 1965. Since the enactment of this legislation, public and private concern has grown over the ability of computer systems and networks to provide adequate protection for personal information maintained about U.S. citizens.

The concept of a government-wide computer network presents a dilemma: should the government take advantage of the economies that may be possible from using multiuser teleprocessing systems rather than individual agency owned and operated data processing systems or protect the individual's right to privacy by prohibiting such networks? This dilemma could be solved and economies realized if adequate controls could be defined and established to ensure confidentiality of data. The major threat to privacy invasion stems from misuse of personel information by individuals having authorized access, and a secondary threat stems from individuals not allowed access to the information who have the technical ability to circumvent security measures. The risk to personal information varies with the type of data involved, the effectiveness of the controls exercised, and the configuration of the computer network. While absolute security cannot be assured, a high level of protection can be provided in a multiuser computer network.

Recommendations

Our recommendations from this work are listed below with a Contact for more information. Status will change from "In process" to "Open," "Closed - implemented," or "Closed - not implemented" based on our follow up work.

Director: No director on record Team: No team on record Phone: No phone on record