What policy changes affect National Program of Cancer Registries (NPCR) programs?
The Office of Management and Budget (OMB) released a memorandum (M-06-16) (PDF-120KB) recommending all federal agencies protect sensitive information, and provide a security checklist. This requirement includes personally identifying information (PII) collected by third parties (i.e., cancer registries) using federal funds. The Veterans Health Administration (VHA) issued Directive 2007-023 (PDF-96KB) requiring cancer registries to establish a Data Transfer Agreement (DTA) and to encrypt all PII. The encryption software must be validated by the National Institute of Standards and Technology (NIST) to meet the current version of Federal Information Processing Standards (FIPS) 140, which is 140-2.
The Office of Management and Budget (OMB) released a memorandum (M-06-16 [PDF-120KB]) recommending all federal agencies protect sensitive information, and provide a security checklist. This requirement includes personally identifying information (PII) collected by third parties (i.e., cancer registries) using federal funds. The Veterans Health Administration (VHA) issued Directive 2007-023 [PDF-96KB] requiring cancer registries to establish a Data Transfer Agreement (DTA) and to encrypt all PII. The encryption software must be validated by the National Institute of Standards and Technology (NIST) to meet the current version of Federal Information Processing Standards (FIPS) 140, which is 140-2.
The Office of Management and Budget (OMB) released a memorandum (M-06-16 [PDF-120KB]) recommending all federal agencies protect sensitive information, and provide a security checklist. This requirement includes personally identifying information (PII) collected by third parties (i.e., cancer registries) using federal funds. The Veterans Health Administration (VHA) issued Directive 2007-023 requiring cancer registries to establish a Data Transfer Agreement (DTA) and to encrypt all PII. The encryption software must be validated by the National Institute of Standards and Technology (NIST) to meet the current version of Federal Information Processing Standards (FIPS) 140, which is 140-2.